Fortinet NSE5_FMG-7.2 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-7.2 Online Questions & Answers

• Question 1:

  Refer to the exhibit.

  

  A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM, which has four policy packages. The customer administrator has access onlytoMy_ADOM. How can customer or service provider administrators remove both global header and footer policies from the policy package named Shared_Package?

  A. The service provider administrator can unassign both policies from the global ADOM.
  B. The service provider administrator can unassign both global policies from My_ADOM.
  C. The customer administrator can unassign both polices by locking My_ADOM.
  D. The customer administrator can unassign both global polices from My_ADOM.
  A. The service provider administrator can unassign both policies from the global ADOM.

• Question 2:

  An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?

  A. It allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.
  B. It allows FortiManager to determine the connection status of managed devices.
  C. It allows administrative access to FortiManager.
  D. It allows third-party applications to gain read/write access to FortiManager.
  A. It allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.

• Question 3:

  Refer to the exhibit.

  

  

  On FortiManager, an administrator created a new system template named Training with two new DNS addresses. During the installation preview stage, the administrator notices that central-management settings need to be purged. What can be the main reason for the central-management purge command?

  A. The Remote-FortiGate device does not have any DNS server-list configured in the central-management settings.
  B. The DNS addresses in the default system settings are the same as the Training system template.
  C. The ADOM is locked by another administrator.
  D. The Training system template has a default FortiGuard widget.
  A. The Remote-FortiGate device does not have any DNS server-list configured in the central-management settings.

• Question 4:

  An administrator is replacing a failed device on FortiManager by running the following command:

  execute device replace sn .

  Which device name and serial number must the administrator use?

  A. The device name of the new device and serial number of the failed device
  B. The device name and serial number of the failed device
  C. The device name of the failed device and serial number of the new device
  D. The device name and serial number of the new device
  C. The device name of the failed device and serial number of the new device

• Question 5:

  What does a policy package status of Modified indicate?

  A. FortiManager is unable to determine the policy package status
  B. The policy package was never imported after a device was registered on FortiManager
  C. The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager
  D. The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
  B. The policy package was never imported after a device was registered on FortiManager

• Question 6:

  Refer to the exhibit.

  

  An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.

  After the installation operation is performed, which IP/netmask will be shown on FortiManager for this firewall address object without specify Per-Device Mapping?

  A. The FortiManager replaces the address object to none.
  B. 0.0.0.0/0.
  C. 192. 168.1.0/24.
  D. 10.0.5. 0/24.
  C. 192. 168.1.0/24.

• Question 7:

  What does a policy package status of Never Installed indicate?

  A. The policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager.
  B. FortiManager is unable to determine the policy package status.
  C. The policy configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
  D. The policy package was never imported after a device was registered on FortiManager
  D. The policy package was never imported after a device was registered on FortiManager

• Question 8:

  An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package Fortinet in the custom ADOM1. What will happen to the Fortinet policy package when it is created?

  A. You need to assign the global policy package from the global ADOM
  B. You need to reapply the global poky package to the ADOM
  C. it automatically assigns the global policies
  D. You can select the option to assign the global polices
  C. it automatically assigns the global policies

• Question 9:

  In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric. Given the administrator's actions, which statement correctly describes the expected result?

  A. The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.
  B. The authorized FortiGate will be automatically added to the Training ADOM.
  C. The authorized FortiGate will appear in the root ADOM.
  D. The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors.
  C. The authorized FortiGate will appear in the root ADOM.

• Question 10:

  Refer to the exhibit.

  

  Given the configuration shown in the exhibit, what can you conclude from the installation targets m the Install On column? (Choose two)

  A. Policy seq # 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target
  B. Policy seq # 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets
  C. Policy seq # 1 will be installed on the Remoto-FortiGate root[NAT] and Student[NAT] VDOMs only
  D. Policy 3 will be installed on all FortiGate devices and vdom belongs to the ADOM
  E. Policy seq # 3 will be skipped because no installation targets are specified
  B. Policy seq # 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets
  C. Policy seq # 1 will be installed on the Remoto-FortiGate root[NAT] and Student[NAT] VDOMs only