NSE5_FMG-5.4 FortiManager 5.4 Specialist Exam

Who Should Attempt the NSE 5 Certification
We recommend this course for network and security professionals who require the expertise to centrally manage, analyze, and report on Fortinet security devices.

Program Requirements
You must successfully pass a minimum of any two Fortinet NSE 5 certification exams:
Fortinet NSE 5 – FortiAnalyzer
Fortinet NSE 5 – FortiClient-EMS
Fortinet NSE 5 – FortiEDR (coming soon)
Fortinet NSE 5 – FortiManager
Fortinet NSE 5 – FortiSIEM
Fortinet NSE 5 – FortiSOAR (coming soon)

To prepare for the certification exams, we recommend that you take the corresponding NSE 5 product courses. The courses are optional.

About the NSE 5 Exams
These exams are available at Pearson VUE test center.

Fortinet NSE 5 – FortiClient 6.0
Exam series: NSE5_FCT-6.0
Number of questions: 30
Time allowed to complete: 60 minutes
Language: English and Japanese
Product version: FortiClient 6.0
Status: Registration ends August 31, 2020

Fortinet NSE 5 – FortiSIEM 5.1
Exam series: NSE5_FSM-5.1
Number of questions: 25
Time allowed to complete: 50 minutes
Language: English
Product version: FortiSIEM 5.1
Status: Registration ends September 30, 2020

Fortinet NSE 5 – FortiManager 6.2
Exam series: NSE5_FMG-6.2
Number of questions: 35
Time allowed to complete: 70 minutes
Language: English and Japanese
Product version: FortiManager 6.2
Status: Available

Fortinet NSE 5 – FortiAnalyzer 6.2
Exam series: NSE5_FAZ-6.2
Number of questions: 25
Time allowed to complete: 50 minutes
Language: English and Japanese
Product version: FortiAnalyzer 6.2
Status: Available

QUESTION 1
When installation is performed from the FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
B. FortiGate will reject the CLI commands that will cause the tunnel to go down.
C. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
D. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.

Correct Answer: C

QUESTION 2
Which of the following statements are true regarding VPN Manager? (Choose three.)

A. VPN Manager must be enabled on a per ADOM basis.
B. VPN Manager automatically adds newly-registered devices to a VPN community.
C. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
D. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
E. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

Correct Answer: ACD

QUESTION 3
What is the purpose of the Policy Check feature on FortiManager?

A. To find and merge duplicate policies in the policy package.
B. To find and provide recommendation to combine multiple separate policy packages into one common policy package.
C. To find and delete disabled firewall policies in the policy package.
D. To find and provide recommendation for optimizing policies in a policy package.

Correct Answer: A