最新 [2022年02月05日]NSE5_FMG-6.2試験問題には有効なNSE5_FMG-6.2問題集PDF
NSE5_FMG-6.2練習テスト問題解答は更新された85問があります
質問 43
What is the purpose of ADOM revisions?
- A. To create System Checkpoints for the FortiManager configuration.
- B. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision
- C. To save the current state of all policy packages and objects for an ADOM.
- D. To save the current state of the whole ADOM.
正解: C
質問 44
View the following exhibit.
Which statement is true regarding this failed installation log?
- A. Policy ID 2 is installed without a source device
- B. Policy ID 2 is installed in disabled state
- C. Policy ID 2 will not be installed
- D. Policy ID 2 is installed without a source address
正解: A
質問 45
View the following exhibit:
How will FortiManager try to get updates for antivirus and IPS?
- A. From the list of configured override servers with ability to fall back to public FDN servers
- B. From the configured override server list only
- C. From the default server fdsl.fortinet.com
- D. From public FDNI server with highest index number only
正解: A
質問 46
What configuration setting for FortiGate is part of a device-level database on FortiManager?
- A. Security profiles
- B. Firewall policies
- C. Routing
- D. VIP and IP Pools
正解: C
質問 47
Refer to the exhibit.
An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?
- A. It allows FortiGate to reboot and restore a previously working firmware image.
- B. It allows FortiGate to unset central management settings.
- C. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.
- D. It allows FortiGate to reboot and recover the previous configuration from its configuration file.
正解: D
解説:
Explanation/Reference:
Reference: https://docs.fortinet.com/document/fortimanager/6.2.0/fortigate-fortimanager-communications- protocol-guide/141304/fgfm-recovery-logic
質問 48
Refer to the exhibit.
An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)
- A. The administrator profile does not have full access privileges like the Super_User profile.
- B. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.
- C. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.
- D. FortiAnalyzer features are not enabled on FortiManager.
正解: B,D
質問 49
Refer to the exhibit. If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)
- A. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
- B. If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
- C. FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.
- D. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
正解: A,D
解説:
Fortimanager can discover FortiGate through a NATed FortiGate IP address. If a FortiManager NATed IP address is configured on FortiGate, then FortiGate can announce itself to FortiManager. FortiManager will not attempt to re-establish the FGFM tunnel to the FortiGate NATed IP address, if the FGFM tunnel is interrupted. Just like it was in the NATed FortiManager scenario, the FortiManager NATed IP address in this scenario is not configured under FortiGate central management configuration.
質問 50
An administrator has added all the devices in a Security Fabric group to FortiManager.
How does the administrator identify the root FortiGate?
- A. By an Asterisk (*) at the end of the device name
- B. By an at symbol (@) at the end of the device name
- C. By a question no mark(?) at the end of the device name
- D. By a dollar symbol ($) at the end of the device name
正解: A
質問 51
You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?
- A. Any unused objects from a previous ADOM are moved to the new ADOM automatically
- B. Policy packages will be imported into the new ADOM automatically
- C. The shared policy package will not be moved to the new ADOM
- D. Any pending device settings will be installed automatically
正解: B
質問 52
View the following exhibit.
Which one of the following statements is true regarding the object named ALL?
- A. FortiManager installed the object ALL with the updated value.
- B. FortiManager updated the object ALL using FortiGate's value in its database
- C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.
- D. FortiManager updated the object ALL using FortiManager's value in its database
正解: B
質問 53
An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?
- A. You must specify a gateway address when you create a default static route
- B. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route
- C. Remove all the interface references such as routes or policies
- D. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.
正解: D
質問 54
Refer to the following exhibit:
Which of the following statements are true based on this configuration? (Choose two.)
- A. The same administrator can lock more than one ADOM at the same time
- B. Unlocking an ADOM will submit configuration changes automatically to the approval administrator
- C. Unlocking an ADOM will install configuration automatically on managed devices
- D. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out
正解: A,D
解説:
To enable ADOM locking and disable concurrent ADOM access:
config system global
set workspace-mode normal
end
Reference: http://help.fortinet.com/fmgr/cli/5-6-2/Document/0800_ADOMs/200_Configuring+.htm
質問 55
Which of the following items does an FGFM keepalive message include? (Choose two.)
- A. FortiGate uptime
- B. FortiGate IPS version
- C. FortiGate license information
- D. FortiGate configuration checksum
正解: B,D
質問 56
View the following exhibit. Which of the following statements are true based on this configuration setting? (Choose two.)
- A. This setting is applied globally to all ADOMs.
- B. This setting will enable the ADOMs feature on FortiManager.
- C. This setting will allow automatic updates to the policy package configuration for a managed device.
- D. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.
正解: A,D
質問 57
Refer to the exhibit.
Which two statements about the output are true? (Choose two.)
- A. Configuration changes directly made on FortiGate have been automatically updated to the device-level database.
- B. The latest revision history for the managed FortiGate does match with the FortiGate running configuration.
- C. The latest revision history for the managed FortiGate does not match with the device-level database.
- D. Configuration changes have been installed on FortiGate, which means the FortiGate configuration has been changed.
正解: B,C
質問 58
An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI.
Both port1 and port2 are part of the SD-WAN member interfaces. Which interface must the administrator select in the static route device drop-down list?
- A. virtual-wan-link
- B. port2
- C. auto-discovery
- D. port1
正解: A
質問 59
You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?
- A. Any unused objects from a previous ADOM are moved to the new ADOM automatically
- B. The shared policy package will not be moved to the new ADOM
- C. Any pending device settings will be installed automatically
- D. Policy packages will be imported into the new ADOM automaticallyD
正解: D
質問 60
......
NSE5_FMG-6.2問題集で合格確定させる練習には85問があります：https://jp.fast2test.com/NSE5_FMG-6.2-premium-file.html