NSE5_FMG-7.2 Dumps are Available for Instant Access [2024]
Practice with these NSE5_FMG-7.2 dumps Certification Sample Questions
NEW QUESTION # 40
Refer to the exhibit.
An administrator wants to create a policy on the Staging ADOM in backup mode, and install it on the FortiGate device in the same ADOM.
How can the administrator perform this task?
- A. The administrator must use the Policy & Objects section to create a policy first.
- B. The administrator must change the ADOM mode to Advanced to bring the FortiManager online.
- C. The administrator must disable the FortiManager offline mode first.
- D. The administrator must use the I ortiManager script.
Answer: B
NEW QUESTION # 41
An administrator is replacing a device on FortiManager by running the following command:
execute device replace sn <devname> <serialnum>.
What device name and serial number must the administrator use?
- A. Device name and serial number of the original device.
- B. Device name of the replacement device and serial number of the original device.
- C. Device name of the original device and serial number of the replacement device.
- D. Device name and serial number of the replacement device.
Answer: C
NEW QUESTION # 42
Which two statements about the scheduled backup of FortiManager are true? (Choose two.)
- A. It does not back up firmware images saved on FortiManager.
- B. It backs up all devices and the FortiGuard database.
- C. It can be configured using the CLI and GUI.
- D. It supports FTP, SCP, and SFTP.
Answer: A,D
Explanation:
Reference:https://docs.ansible.com/ansible/latest/collections/fortinet/fortimanager/fmgr_system_backup_allsettin
NEW QUESTION # 43
View the following exhibit.
When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)
- A. Will not create new revision in the revision history
- B. Provides the option to preview configuration changes prior to installing them
- C. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
- D. Installs device-level changes to FortiGate without launching the Install Wizard
Answer: C,D
NEW QUESTION # 44
What is the purpose of ADOM revisions?
- A. To save the current state of the whole ADOM.
- B. To save the current state of all policy packages and objects for an ADOM.
- C. To createSystem Checkpointsfor the FortiManager configuration.
- D. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision
Answer: B
Explanation:
Fortimanager 6.4 Study guide page 198
NEW QUESTION # 45
View the following exhibit.
Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?
- A. The Install On column value represents successful installation on the managed devices
- B. Policy seq#3 will be not installed on any managed device
- C. Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets
- D. Policy seq#3 will be installed on the Trainer[NAT] VDOM only
Answer: C
NEW QUESTION # 46
Which two statements about the scheduled backup of FortiManager are true? (Choose two.)
- A. It does not back up firmware images saved on FortiManager.
- B. It backs up all devices and the FortiGuard database.
- C. It can be configured using the CLI and GUI.
- D. It supports FTP, SCP, and SFTP.
Answer: A,D
NEW QUESTION # 47
An administrator created a header and footer global policy package and assigned it to an ADOM.
What are two outcomes from this action? (Choose two.)
- A. If you assign an additional global policy package to the same ADOM, FortiManaqer removes previously assigned policies.
- B. You must manually move the header and footer policies after the policy assignment.
- C. You can edit or delete all the global objects in the global ADOM.
- D. After you assign the global policy package to an ADOM, the policy package is hidden from the ADOM and cannot be viewed.
Answer: B,C
NEW QUESTION # 48
An administrator run the reload failure command: diagnose test deploymanager reload config
<deviceid> on FortiManager. What does this command do?
- A. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
- B. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
- C. It installs the latest configuration on the specified FortiGate and update the revision history database.
- D. It installs the provisioning template configuration on the specified FortiGate.
Answer: B
NEW QUESTION # 49
An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.
Which interface must the administrator select in the static route device drop-down list?
- A. port1
- B. port2
- C. virtual-wan-link
- D. auto-discovery
Answer: C
NEW QUESTION # 50
An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?
- A. FortiManager will replace the deleted address object with thenoneaddress object in the referenced firewall policy
- B. FortiManager will not allow the administrator to delete a referenced address object
- C. FortiManager will replace the deleted address object withalladdress object in the referenced firewall policy
- D. FortiManager will disable the status of the referenced firewall policy
Answer: A
Explanation:
Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20O
NEW QUESTION # 51
Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)
- A. Managed devices in other ADOMs must be treated as external gateways
- B. Protected subnets are the subnets behind the device that you don't want to allow access to over the IPsec VPN
- C. External gateways are third-party VPN gateway devices only
- D. Managed gateways are devices managed by FortiManager in the same ADOM
Answer: A,D
NEW QUESTION # 52
Refer to the exhibit.
Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?
- A. FortiManager ignored the firewall service category general and deleted the duplicate value In Its database
- B. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.
- C. FortiManager ignored the firewall service category General and did not update Its database with the value
- D. FortiManager ignored the firewall service category General but created a new service category in its database.
Answer: C
NEW QUESTION # 53
Which configuration setting for FortiGate is part of a device-level database on FortiManager?
- A. Security profiles
- B. VIP and IP Pools
- C. Routing
- D. Firewall policies
Answer: A
Explanation:
The FortiManager stores the FortiGate configuration details in two distinct databases. The device-level database includes configuration details related to device-level settings, such as interfaces, DNS, routing, and more. The ADOM-level database includes configuration details related to firewall policies, objects, and security profiles.
NEW QUESTION # 54
Refer to the exhibit.
An administrator has created a firewall address object,Trainingwhich is used in the Local-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for theTrainingfirewall address object?
- A. It will create a firewall address group on Local-FortiGate with192.168.0.1/24and10.0.1.0/24object values.
- B. 10.200.1.0/24
- C. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.
- D. 192.168.0.1/24
Answer: D
NEW QUESTION # 55
An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package,Fortinet, in the custom ADOM1.
Which statement about the global policy package assignment to the newly-created policy packageFortinetis true?
- A. When a new policy package is created, you need to reapply the global policy package to the ADOM.
- B. When a new policy package is created, it automatically assigns the global policies to the new package.
- C. When a new policy package is created, you need to assign the global policy package from the global ADOM.
- D. When a new policy package is created, you can select the option to assign the global policies to the new package.
Answer: B
Explanation:
Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).
NEW QUESTION # 56
Refer to the exhibit.
Which two statements about an ADOM set inNormalmode on FortiManager are true? (Choose two.)
- A. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate
- B. You cannot assign the same ADOM to multiple administrators
- C. It supports the FortiManager script feature
- D. It allows making configuration changes for managed devices on FortiManager panes
Answer: C,D
Explanation:
"FortiGate units in the ADOM will query their own configuration every 5 seconds. If there has been a configuration change, the FortiGate unit will send a diff revision on the change to the FortiManager using the FGFM protocol."
NEW QUESTION # 57
An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?
- A. Changes to the AP's state must be performed directly on the managed FortiGate.
- B. Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.
- C. Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.
- D. Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.
Answer: C
NEW QUESTION # 58
Which two statements regarding device management on FortiManager are true? (Choose two.)
- A. FortiGate devices in HA cluster devices are counted as a single device.
- B. The maximum number of managed devices for each ADOM is 500.
- C. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.
- D. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.
Answer: A,D
NEW QUESTION # 59
An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.
What can prevent an admin account that has Super_User rights over the device from approving a workflow session?
- A. Student, who submitted the workflow session, must first self-approve the request
- B. Trainer is not a part of workflow approval group
- C. Trainer does not have full rights over this ADOM
- D. Trainer must close Student's workflow session before approving the request
Answer: B
NEW QUESTION # 60
In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?
- A. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.
- B. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.
- C. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device
- D. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.
Answer: A
Explanation:
FortiManager_6.4_Study_Guide-Online - page 346
FortiManager HA doesn't support IP takeover where an HA state transition is transparent to administrators. If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:
1. Manually reconfigure one of the secondary devices to become the primary device
2. Reconfigure all other secondary devices to point to the new primary device
NEW QUESTION # 61
View the following exhibit, which shows theDownload Import Report:
Why it is failing to import firewall policy ID 2?
- A. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager
- B. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate
- C. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.
- D. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager
Answer: B
Explanation:
FortiManager_6.4_Study_Guide-Online - page 331 & 332
NEW QUESTION # 62
Refer to the exhibit.
In the event that the monitored interface for the primary FortiManager device fails, which statement is true about FortiManager HA?
- A. The FortiManager HAfailover is transparent to administrators and does not require any reconfiguration.
- B. Reboot the failed device to remove its IP from the primary device.
- C. Reconfigure the primary device lo remove the peer IP of the failed device.
- D. Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.
Answer: A
NEW QUESTION # 63
......
Get Instant Access REAL NSE5_FMG-7.2 DUMP Pass Your Exam Easily: https://actualtests.prep4away.com/Fortinet-certification/braindumps.NSE5_FMG-7.2.ete.file.html