NSE5_FMG-5.4 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
What does a policy package status of Modified indicate?

A.Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
B.The policy package was never imported after a device was registered on FortiManager.
C.FortiManager is unable to determine the policy package status.
D.Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager.

正解:
Explanation:
Reference: http://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1200_Policy%20and% 20Objects/0800_Managing%20policy%20packages/2200_Policy%20Package%20Installation% 20targets.htm

Question No : 2
Which of the following statements are true regarding ADOM revisions? (Choose two.)

A.ADOM revisions can save the current state of all policy packages and objects for an ADO
B.ADOM revisions can significantly increase the size of the configuration backups.
C.ADOM revisions can create System Checkpoints for the FortiManager configuration.
D.ADOM revisions can save the current state of the whole ADO

正解:

Question No : 3
View the following exhibit.

Which of the following statements are true based on this configuration setting? (Choose two.)

A.This setting will enable the ADOMs feature on FortiManager.
B.This setting is applied globally to all ADOMs.
C.This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.
D.This setting will allow automatic updates to the policy package configuration for a managed device.

正解:

Question No : 4
How are the points calculated when using FortiMeter to deploy FortiOS-VM? (Choose two.)

A.Based on the number of sessions on the mgmt interface of FortiOS-V
B.Based on the FortiGuard service option enabled for FortiOS-V
C.Based on the traffic usage on port1 and port2 on FortiOS-V
D.Based on the amount of traffic (per GB) passing through the FortiOS-V

正解:
Explanation:
Point calculations are based off of traffic passing through the FortiOS-VM interfaces.
Points are used per terabyte of traffic and there is an increased point cost as you increase the FortiGuard services in use.
- 4 pts/TB for a FortiOS-VM tagged as "FW"
- 10 pts/TB for a FortiOS-VM tagged as "FW + URL"
- 25 pts/TB for a FortiOS-VM tagged as "UTM"
Reference: https://docs.fortinet.com/uploaded/files/4057/fortinetvm_on-demand_1.pdf

Question No : 5
As a result of enabling FortiAnalyzer features on FortiManager, which one of the following statements is true?

A.FortiManager can be used only as a logging device.
B.FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices.
C.FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager.
D.FortiManager will reboot.

正解:

Question No : 6
An administrator is unable to log in to FortiManager.
Which one of the following troubleshooting step should you take to resolve the issue?

A.Make sure FortiManager Access is enabled in the administrator profile.
B.Make sure ADOMs are enabled and the administrator has access to the Global ADO
C.Make sure Offline Mode is disabled.
D.Make sure the administrator IP address is part of the trusted hosts.

正解:

Question No : 7
View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

A.The address object used in policy ID 2 already exist in ADOM database with any as interface association and conflicts with address object interface association locally on the FortiGate.
B.Policy ID 2 is configured from interface any to port6. FortiManager rejects to import this policy because any interface does not exist on FortiManager.
C.Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.
D.Policy ID 2 does not have ADOM Interface mapping configured on FortiManager.

正解:

Question No : 8
View the following exhibit:

Which statement is true regarding this failed installation log?

A.Policy ID 2 is installed without a source address.
B.Policy ID 2 is installed without a source device.
C.Policy ID 2 will not be installed.
D.Policy ID 2 is installed in disabled state.

正解:

Question No : 9
What are the factory default settings on FortiManager? (Choose three.)

A.Password is fortinet
B.port1 interface IP address is 192.168.1.99/24
C.Service Access is enabled on port1
D.Username is admin
E.Reports and Event Monitor panes are enabled

正解:

Question No : 10
An administrator wants to delete an address object that is currently referenced in a firewall policy.
Which one of the following statements is true?

A.FortiManager will replace the deleted address object with the all address object in the referenced firewall policy.
B.FortiManager will disable the status of the referenced firewall policy.
C.FortiManager will not allow the administrator to delete a referenced address object.
D.FortiManager will replace the deleted address object with the none address object in the referenced firewall policy.

正解:

Question No : 11
View the following exhibit: What of the following statements are true regarding the output? (Choose two.)

A.Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed.
B.The latest revision history for the managed FortiGate does match with the FortiGate running configuration.
C.The latest revision history for the managed FortiGate does not match with the device-level database.
D.Configuration changes directly made on the FortiGate have been automatically updated to device-level database.

正解:

Question No : 12
View the following exhibit:

An administrator, Trainer, who is assigned the Super_Userprofile, is trying to approve a workflow session that was submitted by another administrator, Student.
However, Trainer is unable to approve the workflow session.
What can prevent an admin account that has Super_Userrights over the device from approving a workflow session?

A.Trainer must close Student's workflow session before approving the request.
B.Trainer does not have full rights over this ADO
C.Trainer is not a part of workflow approval group.
D.Student, who submitted the workflow session, must first self-approve the request.

正解:

Question No : 13
An administrator has assigned a global policy package to custom ADOM1.
What will happen if the administrator tries to create a new policy package in custom ADOM1?

A.When a new policy package is created, you need to reapply the global policy package to the ADO
B.When creating a new policy package, can select the option to assign the global policies to the new package.
C.When a new policy package is created, it automatically assigns the global policies to the new package.
D.When a new policy package is created, you must assign the global policy package from the global ADO

正解:

Question No : 14
An administrator would like to authorize a newly-installed AP using AP Manager.
What steps does the administrator need to perform to authorize an AP?

A.Authorize the new AP using AP Manager and wait until the change is updated on the FortiA
B.Changes to the AP's state do not require installation.
C.Changes to the AP's state must be performed directly on the managed FortiGate.
D.Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.
E.Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

正解:

Question No : 15
Which of the following statements are true regarding an FGFM keepalive message? (Choose two.)

A.It includes the configuration checksum of FortiGate.
B.The keepalive interval for keepalive messages is configured on FortiGate.
C.It is sent only by FortiGate.
D.It is used between FortiManager HA cluster members to make sure cluster members are in sync.

正解:

Fortinet NSE5_FMG-5.4 問題練習