Fortinet NSE5_FMG-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-7.0 Online Questions & Answers

• Question 51:

  When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

  A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
  B. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
  C. FortiGate will reject the CLI commands that will cause the tunnel to go down.
  D. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.
  B. FortiManager will revert and install a previous configuration revision on the managed FortiGate.

  ---

  The configuration change will break the fgfm connection, causing the FortiGate unit to attempt to reconnect for 900 seconds. If the FortiGate cannot reconnect, it will rollback to its previous configuration.

• Question 52:

  In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric. Given the administrator's actions, which statement correctly describes the expected result?

  A. The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.
  B. The authorized FortiGate will be automatically added to the Training ADOM.
  C. The authorized FortiGate will appear in the root ADOM.
  D. The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors.
  C. The authorized FortiGate will appear in the root ADOM.

• Question 53:

  What is the purpose of the Policy Check feature on FortiManager?

  A. To find and provide recommendation to combine multiple separate policy packages into one common policy package
  B. To find and merge duplicate policies in the policy package
  C. To find and provide recommendation for optimizing policies in a policy package
  D. To find and delete disabled firewall policies in the policy package
  C. To find and provide recommendation for optimizing policies in a policy package

  ---

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/0800_Managing%20policy %20packages/2400_Perform%20a%20policy%20consistency%20check.htm

• Question 54:

  Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

  A. To push these changes to a managed device, it required an install operation to the managed FortiGate.
  B. Reverting to a previous revision history will generate a new version ID and remove all other history versions.
  C. Reverting to a previous revision history will tag the device settings status as Auto-Update.
  D. It will modify device-level database
  A. To push these changes to a managed device, it required an install operation to the managed FortiGate.
  D. It will modify device-level database

• Question 55:

  View the following exhibit:

  

  How will FortiManager try to get updates for antivirus and IPS?

  A. From the list of configured override servers with ability to fall back to public FDN servers
  B. From the configured override server list only
  C. From the default server fdsl.fortinet.com
  D. From public FDNI server with highest index number only
  A. From the list of configured override servers with ability to fall back to public FDN servers

  ---

  Reference: https://community.fortinet.com/t5/Fortinet-Forum/Clarification-of-FortiManager-s-quot-Server-Override-Mode-quot/td-p/89973

• Question 56:

  An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the managed FortiGate. In which database will the configuration be saved?

  A. Device-level database
  B. Revision history database
  C. ADOM-level database
  D. Configuration-level database
  C. ADOM-level database

  ---

  https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942

• Question 57:

  View the following exhibit.

  

  When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

  A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
  B. Will not create new revision in the revision history
  C. Installs device-level changes to FortiGate without launching the Install Wizard
  D. Provides the option to preview configuration changes prior to installing them
  A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
  C. Installs device-level changes to FortiGate without launching the Install Wizard

• Question 58:

  Refer to the exhibit.

  

  Which statement about the object named ALL is true?

  A. FortiManager updated the object ALL using the FortiGate value in its database.
  B. FortiManager installed the object ALL with the updated value.
  C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.
  D. FortiManager updated the object ALL using the FortiManager value in its database.
  A. FortiManager updated the object ALL using the FortiGate value in its database.

• Question 59:

  An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators. How should the Workspace mode be configured on FortiManager?

  A. Set to workflow and use the ADOM locking feature
  B. Set to read/write and use the policy locking feature
  C. Set to normal and use the policy locking feature
  D. Set to disable and use the policy locking feature
  A. Set to workflow and use the ADOM locking feature

  ---

  Reference: https://help.fortinet.com/fmgr/50hlp/52/5-2-0/FMG_520_Online_Help/200_What's-New.03.03.html

• Question 60:

  Refer to the exhibit.

  

  According to the error message why is FortiManager failing to add the FortiAnalyzer device?

  A. The administrator must turn off the Use Legacy Device login and add the FortiAnaJyzer device to the same network as Forti-Manager
  B. The administrator must select the Forti-Manager administrative access checkbox on the FortiAnalyzer management interface
  C. The administrator must use the Add Model Device section and discover the FortiAnaJyzer device
  D. The administrator must use the correct user name and password of the FortiAnalyzer device
  B. The administrator must select the Forti-Manager administrative access checkbox on the FortiAnalyzer management interface