Fortinet Fortinet Certifications NSE5_FMG-7.0 Questions & Answers

• Question 21:

  Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

  A. Managed gateways are devices managed by FortiManager in the same ADOM

  B. External gateways are third-party VPN gateway devices only

  C. Protected subnets are the subnets behind the device that you don't want to allow access to over the IPsec VPN

  D. Managed devices in other ADOMs must be treated as external gateways

  Correct Answer: AD

  Reference: http://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/1300_VPN_Manager/0800_IPsec_VPN_Gateway/0400_Create_mngd_gateway.htm

• Question 22:

  What does a policy package status of Modified indicate?

  A. FortiManager is unable to determine the policy package status

  B. The policy package was never imported after a device was registered on FortiManager

  C. The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager

  D. The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

  Correct Answer: D

  Reference: http://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/0800_Managing%20policy %20packages/2200_Policy%20Package%20Installation%20targets.htm

• Question 23:

  What is the purpose of ADOM revisions?

  A. To create System Checkpoints for the FortiManager configuration.

  B. To save the current state of the whole ADOM.

  C. To save the current state of all policy packages and objects for an ADOM.

  D. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision

  Correct Answer: C

  Fortimanager 6.4 Study guide page 198

• Question 24:

  An administrator is replacing a device on FortiManager by running the following command:

  execute device replace sn .

  What device name and serial number must the administrator use?

  A. Device name and serial number of the original device.

  B. Device name and serial number of the replacement device.

  C. Device name of the replacement device and serial number of the original device.

  D. Device name of the original device and serial number of the replacement device.

  Correct Answer: D

• Question 25:

  Refer to the exhibit.

  

  Which two statements are true if the script is executed using the Device Database option? (Choose two.)

  A. You must install these changes using the Install Wizard to a managed device

  B. The successful execution of a script on the Device Database will create a new revision history

  C. The script history will show successful installation of the script on the remote FortiGate

  D. The Device Settings Status will be tagged as Modified

  Correct Answer: AD

• Question 26:

  Which two items are included in the FortiManager backup? (Choose two.)

  A. FortiGuard database

  B. Global database

  C. Logs

  D. All devices

  Correct Answer: BD

  Reference: https://kb.fortinet.com/kb/viewContent.do?externalId=FD34549

• Question 27:

  Refer to the exhibit.

  

  Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

  A. It allows two or more administrators to make configuration changes at the same time, in the same ADOM.

  B. It disables concurrent read-write access to an ADOM.

  C. It allows the same administrator to lock more than one ADOM at the same time.

  D. It is used to validate administrator login attempts through external servers.

  Correct Answer: BC

  Reference: https://docs.fortinet.com/document/fortimanager/6.0.4/administration-guide/86456/concurrentadom-access

• Question 28:

  An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1. Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

  A. When a new policy package is created, it automatically assigns the global policies to the new package.

  B. When a new policy package is created, you need to assign the global policy package from the global ADOM.

  C. When a new policy package is created, you need to reapply the global policy package to the ADOM.

  D. When a new policy package is created, you can select the option to assign the global policies to the new package.

  Correct Answer: A

  Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).

• Question 29:

  An administrator has enabled Service Access on FortiManager.

  What is the purpose of Service Access on the FortiManager interface?

  A. Allows FortiManager to download IPS packages

  B. Allows FortiManager to respond to request for FortiGuard services from FortiGate devices

  C. Allows FortiManager to run real-time debugs on the managed devices

  D. Allows FortiManager to automatically configure a default route

  Correct Answer: B

  FortiManager 6.2 Study guide page 350

• Question 30:

  Refer to the exhibit.

  

  Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

  A. It supports the FortiManager script feature

  B. It allows making configuration changes for managed devices on FortiManager panes

  C. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate

  D. You cannot assign the same ADOM to multiple administrators

  Correct Answer: AB

  "FortiGate units in the ADOM will query their own configuration every 5 seconds. If there has been a configuration change, the FortiGate unit will send a diff revision on the change to the FortiManager using the FGFM protocol."