Fortinet NSE5_FMG-6.2 問題集

質問 1：
Which of the following are FortiManager features? (Choose two)
A. Administrative Domains
B. Cloud-based Management
C. Centralized Management
D. Virtual Domains
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Refer to the exhibit. Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

A. You cannot assign the same ADOM to multiple administrators
B. It supports the FortiManager script feature
C. It allows making configuration changes for managed devices on FortiManager panes
D. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate
正解：C,D

質問 3：
In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices.
The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?
A. The FortiManager administrator must add the unregistered device manually to the unregistered device manually to the Training ADOM using the Add Device wizard
B. The FortiGate will be added automatically to the default ADOM named FortiGate.
C. By default, the unregistered FortiGate will appear in the root ADOM.
D. The FortiGate will be automatically added to the Training ADOM.
正解：C

質問 4：
An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the Workspace mode be configured on FortiManager?
A. Set to disable and use the policy locking feature
B. Set to normal and use the policy locking feature
C. Set to read/write and use the policy locking feature
D. Set to workflow and use the ADOM locking feature
正解：D

質問 5：
An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.
Which troubleshooting step should you take to resolve the issue?
A. Make sure FortiManager Access is enabled in the administrator profile
B. Make sure ADOMs are enabled and the administrator has access to the Global ADOM
C. Make sure Offline Mode is disabled
D. Make sure the administrator IP address is part of the trusted hosts
正解：D

質問 6：
Which of the following statements are true regarding VPN Manager? (Choose three.)
A. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.
B. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
C. VPN Manager must be enabled on a per ADOM basis.
D. VPN Manager automatically adds newly-registered devices to a VPN community.
E. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
正解：B,C,E

質問 7：
A FortiGate device is imported to FortiManager using the settings given in the exhibit.

An administrator subsequently modifies and installs the policy package.
Which two statements are correct regarding the scenario? (Choose two)
A. The orphan (unused) objects that are not tied to policies locally on the FortiGate will not be deleted on install.
B. The orphan (unused) objects that are not tied to policies locally on the FortiGate will be deleted on install.
C. The FortiManager imported all unused objects to the ADOM object database. These objects can be used by referencing in the policies on FortiManager and installing to the managed devices.
D. The FortiManager did not import unused objects to the ADOM object database. These objects cannot be used by referencing in the policies on FortiManager and installing to the managed devices.
正解：B,D

質問 8：
What does a policy package status of Conflict indicate?
A. The policy package configuration has been changed on both FortiManager and the managed device independently.
B. The policy package does not have a FortiGate as the installation target.
C. The policy configuration has never been imported after a device was registered on FortiManager.
D. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.
正解：D