Fortinet Fortinet Certifications NSE5_FMG-7.0 Questions & Answers

• Question 61:

  Which two statements about the scheduled backup of FortiManager are true? (Choose two.)

  A. It does not back up firmware images saved on FortiManager.

  B. It can be configured using the CLI and GUI.

  C. It backs up all devices and the FortiGuard database.

  D. It supports FTP, SCP, and SFTP.

  Correct Answer: AD

  Reference:

  https://docs.ansible.com/ansible/latest/collections/fortinet/fortimanager/fmgr_system_backu p_allsettings_module.html

• Question 62:

  Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

  A. When configuration revision is reverted to previous revision in the revision history

  B. When FortiManager installs device-level changes to a managed device

  C. When FortiManager is auto-updated with configuration changes made directly on a managed device

  D. When changes to device-level database is made on FortiManager

  Correct Answer: BC

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1000_Device%20Manager/1500_Manage_device_configs/0 600_Manage%20config%20rev%20history.htm

• Question 63:

  An administrator wants to delete an address object that is currently referenced in a firewall policy. What can the administrator expect to happen?

  A. FortiManager will not allow the administrator to delete a referenced address object

  B. FortiManager will disable the status of the referenced firewall policy

  C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

  D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy

  Correct Answer: C

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/1200_Managing%20object s/0800_Remove%20an%20object.htm

• Question 64:

  View the following exhibit.

  

  Which statement is true regarding this failed installation log?

  A. Policy ID 2 is installed without a source address

  B. Policy ID 2 will not be installed

  C. Policy ID 2 is installed in disabled state

  D. Policy ID 2 is installed without a source device

  Correct Answer: D

• Question 65:

  An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message. Which troubleshooting step should you take to resolve the issue?

  A. Make sure FortiManager Access is enabled in the administrator profile

  B. Make sure Offline Mode is disabled

  C. Make sure the administrator IP address is part of the trusted hosts.

  D. Make sure ADOMs are enabled and the administrator has access to the Global ADOM

  Correct Answer: C

  Even if a user entered the correct userid/password, the FMG denies access if a user is logging in from an untrusted source IP subnets. Reference: https://docs.fortinet.com/document/fortimanager/6.0.3/administration-guide/107347/trustedhosts

• Question 66:

  Which two settings must be configured for SD-WAN Central Management? (Choose two.)

  A. SD-WAN must be enabled on per-ADOM basis

  B. You can create multiple SD-WAN interfaces per VDOM

  C. When you configure an SD-WAN, you must specify at least two member interfaces.

  D. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

  Correct Answer: AC

• Question 67:

  View the following exhibit.

  

  An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

  A. The unused objects that are not tied to the firewall policies will be installed on FortiGate

  B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate

  C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

  D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database

  Correct Answer: C

  Reference: https://community.fortinet.com/t5/FortiManager/Import-all-objects-Versus-Import-only-policy-dependent-objects/ta-p/193259?externalID=FD40392

• Question 68:

  View the following exhibit.

  

  Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?

  A. The Install On column value represents successful installation on the managed devices

  B. Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

  C. Policy seq#3 will be installed on the Trainer[NAT] VDOM only

  D. Policy seq#3 will be not installed on any managed device

  Correct Answer: B

• Question 69:

  An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session. What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

  

  A. Trainer is not a part of workflow approval group

  B. Trainer does not have full rights over this ADOM

  C. Trainer must close Student's workflow session before approving the request

  D. Student, who submitted the workflow session, must first self-approve the request

  Correct Answer: A

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/0800_ADOMs/1800_Workflow/0600_Workflow%20sessions.htm

• Question 70:

  Refer to the exhibit.

  

  Which statement about the object named ALL is true?

  A. FortiManager updated the object ALL using the FortiGate value in its database.

  B. FortiManager installed the object ALL with the updated value.

  C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

  D. FortiManager updated the object ALL using the FortiManager value in its database.

  Correct Answer: A