Fortinet NSE5_FMG-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-7.0 Online Questions & Answers

• Question 21:

  View the following exhibit.

  

  If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

  A. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
  B. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.
  C. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
  D. If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
  A. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
  C. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

  ---

  Fortimanager can discover FortiGate through a NATed FortiGate IP address. If a FortiManager NATed IP address is configured on FortiGate, then FortiGate can announce itself to FortiManager. FortiManager will not attempt to re-establish the FGFM tunnel to the FortiGate NATed IP address, if the FGFM tunnel is interrupted. Just like it was in the NATed FortiManager scenario, the FortiManager NATed IP address in this scenario is not configured under FortiGate central management configuration.

• Question 22:

  What will be the result of reverting to a previous revision version in the revision history?

  A. It will install configuration changes to managed device automatically
  B. It will tag the device settings status as Auto-Update
  C. It will generate a new version ID and remove all other revision history versions
  D. It will modify the device-level database
  D. It will modify the device-level database

• Question 23:

  View the following exhibit: Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI) option? (Choose two.)

  

  A. You must install these changes using Install Wizard
  B. FortiGate will auto-update the FortiManager's device-level database.
  C. FortiManager will create a new revision history.
  D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.
  B. FortiGate will auto-update the FortiManager's device-level database.
  C. FortiManager will create a new revision history.

• Question 24:

  Which two statements about the scheduled backup of FortiManager are true? (Choose two.)

  A. It does not back up firmware images saved on FortiManager.
  B. It can be configured using the CLI and GUI.
  C. It backs up all devices and the FortiGuard database.
  D. It supports FTP, SCP, and SFTP.
  A. It does not back up firmware images saved on FortiManager.
  D. It supports FTP, SCP, and SFTP.

  ---

  Reference:

  https://docs.ansible.com/ansible/latest/collections/fortinet/fortimanager/fmgr_system_backu p_allsettings_module.html

• Question 25:

  View the following exhibit.

  

  An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

  A. 10.0.1.0/24
  B. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
  C. 192.168.0.1/24
  D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.
  A. 10.0.1.0/24

• Question 26:

  Refer to the exhibits. Exhibit one.

  

  Exhibit two.

  

  An administrator created a new system template named Training with two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed. What can be the main reason for these unset commands?

  A. The DNS addresses in the default system settings are the same as the Training system template
  B. The Training system template has other default settings
  C. The ADOM is locked by another administrator
  D. The Training system template does not have assigned devices
  B. The Training system template has other default settings

• Question 27:

  An administrator wants to delete an address object that is currently referenced in a firewall policy. What can the administrator expect to happen?

  A. FortiManager will not allow the administrator to delete a referenced address object
  B. FortiManager will disable the status of the referenced firewall policy
  C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy
  D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy
  C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

  ---

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/1200_Managing%20object s/0800_Remove%20an%20object.htm

• Question 28:

  Refer to the exhibit.

  

  Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?

  A. FortiManager ignored the firewall service category General but created a new service category in its database.
  B. FortiManager ignored the firewall service category general and deleted the duplicate value In Its database
  C. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.
  D. FortiManager ignored the firewall service category General and did not update Its database with the value
  C. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.

• Question 29:

  An administrator run the reload failure command: diagnose test deploymanager reload config on FortiManager. What does this command do?

  A. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
  B. It installs the latest configuration on the specified FortiGate and update the revision history database.
  C. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
  D. It installs the provisioning template configuration on the specified FortiGate.
  A. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.

  ---

  Reference: https://community.fortinet.com/t5/FortiManager/Technical-Note-Retrieve-configuration-file-using-CLI-from-a/ta-p/191000?externalID=FD36387

• Question 30:

  Which two statements regarding device management on FortiManager are true? (Choose two.)

  A. FortiGate devices in HA cluster devices are counted as a single device.
  B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.
  C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.
  D. The maximum number of managed devices for each ADOM is 500.
  A. FortiGate devices in HA cluster devices are counted as a single device.
  C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.