Fortinet NSE5_FMG-5.4 Actual Free Exam Questions & Community Discussion

Exam Code/Number: NSE5_FMG-5.4
Exam Name/Title: FortiManager 5.4 Specialist
Certification Provider: Fortinet
Corresponding Certification: Network Security Analyst

Exam Questions: 62
Updated On: Jun 02, 2026

Question #29

An administrator wants to delete an address object that is currently referenced in a firewall policy. Which one of the following statements is true?

A. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy.

B. FortiManager will not allow the administrator to delete a referenced address object.

C. FortiManager will replace the deleted address object with the all address object in the referenced firewall policy.

D. FortiManager will disable the status of the referenced firewall policy.

Discussion 0

Correct Answer: B Vote an answer

Question #30

View the following exhibit:

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

B. 10.0.1.0/24

C. 192.168.0.1/24

D. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.

Discussion 0

Correct Answer: A Vote an answer

Question #31

What does the diagnose cdb check policy-assignment command do?

A. Internally upgrades existing ADOMs to the same ADOM version in order to clean up and correct the ADOM syntax.

B. Verifies and corrects global ADOM policy package assignments that have been disassociated from an ADOM.

C. Fixes incorrect ADOM-level object references based on the firewall policies.

D. Verifies and checks dynamic mappings, and removes invalid dynamic mappings.

Discussion 0

Correct Answer: D Vote an answer

Question #32

An administrator is unable to log in to FortiManager. Which one of the following troubleshooting step should you take to resolve the issue?

A. Make sure Offline Mode is disabled.

B. Make sure FortiManager Access is enabled in the administrator profile.

C. Make sure the administrator IP address is part of the trusted hosts.

D. Make sure ADOMs are enabled and the administrator has access to the Global ADOM.

Discussion 0

Correct Answer: C Vote an answer

Question #33

Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

A. External gateways are third-party VPN gateway devices only

B. Managed gateways are devices managed by FortiManager in the same ADOM

C. Protected subnets are the subnets behind the device that you don't want to allow access to over the IPsec VPN

D. Managed devices in other ADOMs must be treated as external gateways

Discussion 0

Correct Answer: B,D Vote an answer

Question #34

View the following exhibit:

An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager.
What name will be used to display the firewall policy for port1?

A. port1 on both FortiGate and FortiManager

B. WAN zone on FortiGate and WAN zone on FortiManager

C. WAN zone on FortiGate and WAN interface on FortiManager

D. port1 on FortiGate and WAN on FortiManager

Discussion 0

Correct Answer: D Vote an answer

Question #35

What is the purpose of the ADOM revision?

A. To save the current state of the whole ADOM.

B. To save the current state of all policy packages and objects for an ADOM.

C. To create System Checkpoint for the FortiManager configuration.

D. To crease System policy packages and device-level settings for a managed Fortigate by reverting to a specific ADOM revision.

Discussion 0

Correct Answer: B Vote an answer

Download Free Fortinet NSE5_FMG-5.4 Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet NSE5_FMG-5.4 exam.