Fortinet Fortinet Certifications NSE5_FMG-7.0 Questions & Answers

• Question 11:

  View the following exhibit.

  

  When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

  A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device

  B. Will not create new revision in the revision history

  C. Installs device-level changes to FortiGate without launching the Install Wizard

  D. Provides the option to preview configuration changes prior to installing them

  Correct Answer: AC

• Question 12:

  Refer to the exhibit.

  

  Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?

  A. FortiManager ignored the firewall service category General but created a new service category in its database.

  B. FortiManager ignored the firewall service category general and deleted the duplicate value In Its database

  C. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.

  D. FortiManager ignored the firewall service category General and did not update Its database with the value

  Correct Answer: C

• Question 13:

  View the following exhibit.

  

  Which one of the following statements is true regarding the object named ALL?

  A. FortiManager updated the object ALL using FortiGate's value in its database

  B. FortiManager updated the object ALL using FortiManager's value in its database

  C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

  D. FortiManager installed the object ALL with the updated value.

  Correct Answer: A

• Question 14:

  What will happen if FortiAnalyzer features are enabled on FortiManager?

  A. FortiManager will keep all the logs and reports on the FortiManager.

  B. FortiManager will enable ADOMs to collect logs automatically from non-FortiGate devices.

  C. FortiManager will install the logging configuration to the managed devices

  D. FortiManager can be used only as a logging device.

  Correct Answer: C

• Question 15:

  Which of the following statements are true regarding VPN Manager? (Choose three.)

  A. VPN Manager must be enabled on a per ADOM basis.

  B. VPN Manager automatically adds newly-registered devices to a VPN community.

  C. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

  D. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.

  E. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

  Correct Answer: ACD

• Question 16:

  An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?

  A. Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.

  B. Changes to the AP's state must be performed directly on the managed FortiGate.

  C. Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.

  D. Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

  Correct Answer: D

• Question 17:

  Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?

  A. NSX-T Service Template

  B. Security profiles

  C. SNMP

  D. Routing

  Correct Answer: D

• Question 18:

  Refer to the exhibit.

  

  According to the error message why is FortiManager failing to add the FortiAnalyzer device?

  A. The administrator must turn off the Use Legacy Device login and add the FortiAnaJyzer device to the same network as Forti-Manager

  B. The administrator must select the Forti-Manager administrative access checkbox on the FortiAnalyzer management interface

  C. The administrator must use the Add Model Device section and discover the FortiAnaJyzer device

  D. The administrator must use the correct user name and password of the FortiAnalyzer device

  Correct Answer: B

• Question 19:

  An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces. Which interface must the administrator select in the static route device drop-down list?

  A. port2

  B. virtual-wan-link

  C. port1

  D. auto-discovery

  Correct Answer: B

• Question 20:

  In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric. Given the administrator's actions, which statement correctly describes the expected result?

  A. The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.

  B. The authorized FortiGate will be automatically added to the Training ADOM.

  C. The authorized FortiGate will appear in the root ADOM.

  D. The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors.

  Correct Answer: C