Fortinet NSE5_FMG-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-7.0 Online Questions & Answers

• Question 1:

  An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

  A. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package
  B. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.
  C. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
  D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.
  D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

  ---

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/0800_Managing%20policy %20packages/1200_Assign%20a%20global%20policy%20package.htm

• Question 2:

  Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?

  A. NSX-T Service Template
  B. Security profiles
  C. SNMP
  D. Routing
  D. Routing

• Question 3:

  Which configuration setting for FortiGate is part of a device-level database on FortiManager?

  A. VIP and IP Pools
  B. Firewall policies
  C. Security profiles
  D. Routing
  D. Routing

  ---

  The FortiManager stores the FortiGate configuration details in two distinct databases. The device-level database includes configuration details related to device-level settings, such as interfaces, DNS, routing, and more. The ADOM-level database includes configuration details related to firewall policies, objects, and security profiles.

• Question 4:

  What will happen if FortiAnalyzer features are enabled on FortiManager?

  A. FortiManager will reboot
  B. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager
  C. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices
  D. FortiManager can be used only as a logging device.
  A. FortiManager will reboot

  ---

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1800_FAZ%20Features/0200_Enable%20FAZ%20Features .htm

• Question 5:

  View the following exhibit.

  

  An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

  A. The unused objects that are not tied to the firewall policies will be installed on FortiGate
  B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
  C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
  D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database
  C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

  ---

  Reference: https://community.fortinet.com/t5/FortiManager/Import-all-objects-Versus-Import-only-policy-dependent-objects/ta-p/193259?externalID=FD40392

• Question 6:

  Refer to the exhibit.

  

  An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.

  Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

  A. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.
  B. The administrator profile does not have full access privileges like the Super_User profile.
  C. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.
  D. FortiAnalyzer features are not enabled on FortiManager.
  B. The administrator profile does not have full access privileges like the Super_User profile.
  D. FortiAnalyzer features are not enabled on FortiManager.

• Question 7:

  View the following exhibit.

  

  Which of the following statements are true based on this configuration setting? (Choose two.)

  A. This setting will enable the ADOMs feature on FortiManager.
  B. This setting is applied globally to all ADOMs.
  C. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.
  D. This setting will allow automatic updates to the policy package configuration for a managed device.
  B. This setting is applied globally to all ADOMs.
  C. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.

• Question 8:

  An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1. Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

  A. When a new policy package is created, it automatically assigns the global policies to the new package.
  B. When a new policy package is created, you need to assign the global policy package from the global ADOM.
  C. When a new policy package is created, you need to reapply the global policy package to the ADOM.
  D. When a new policy package is created, you can select the option to assign the global policies to the new package.
  A. When a new policy package is created, it automatically assigns the global policies to the new package.

  ---

  Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).

• Question 9:

  View the following exhibit.

  

  What is the purpose of setting ADOM Mode to Advanced?

  A. The setting allows automatic updates to the policy package configuration for a managed device
  B. The setting enables the ADOMs feature on FortiManager
  C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.
  D. The setting disables concurrent ADOM access and adds ADOM locking
  C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.

  ---

  Reference: https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/66530/adom-device-modes

• Question 10:

  In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

  A. The FortiGate will be added automatically to the default ADOM named FortiGate.
  B. The FortiGate will be automatically added to the Training ADOM.
  C. By default, the unregistered FortiGate will appear in the root ADOM.
  D. The FortiManager administrator must add the unregistered device manually to the unregistered device manually to the Training ADOM using the Add Device wizard
  C. By default, the unregistered FortiGate will appear in the root ADOM.

  ---

  Reference: https://docs.fortinet.com/document/fortimanager/7.0.0/administration-guide/718923/root-adom