Fortinet NSE5_FMG-7.2 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-7.2 Online Questions & Answers

• Question 21:

  What does the diagnose dvm check-integrity command do? (Choose two.)

  A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax
  B. Verifies and corrects unregistered, registered, and deleted device states
  C. Verifies and corrects database schemas in all object tables
  D. Verifies and corrects duplicate VDOM entries
  B. Verifies and corrects unregistered, registered, and deleted device states
  D. Verifies and corrects duplicate VDOM entries

• Question 22:

  Which configuration setting for FortiGate is part of a device-level database on FortiManager?

  A. VIP and IP Pools
  B. Firewall policies
  C. Security profiles
  D. Routing
  C. Security profiles

• Question 23:

  View the following exhibit:

  

  An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager. What name will be used to display the firewall policy for port1?

  A. port1 on FortiGate and WAN on FortiManager
  B. port1 on both FortiGate and FortiManager
  C. WAN zone on FortiGate and WAN zone on FortiManager
  D. WAN zone on FortiGate and WAN interface on FortiManager
  A. port1 on FortiGate and WAN on FortiManager

• Question 24:

  Refer to the exhibit.

  

  Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

  A. It supports the FortiManager script feature
  B. It allows making configuration changes for managed devices on FortiManager panes
  C. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate
  D. You cannot assign the same ADOM to multiple administrators
  A. It supports the FortiManager script feature
  B. It allows making configuration changes for managed devices on FortiManager panes

• Question 25:

  View the following exhibit, which shows the Download Import Report:

  

  Why it is failing to import firewall policy ID 2?

  A. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate
  B. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager
  C. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager
  D. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.
  A. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

• Question 26:

  View the following exhibit.

  

  Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?

  A. Policy 3 will be installed on all FortiGate devices and vdom belongs to the ADOM.
  B. Policy seq.# 3 will be skipped because no installation targets are specified.
  C. Policy seq.# 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets.
  D. Policy seq.# 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target.
  E. Policy seq # 1 will be installed on the Remote-FortiGate root[NAT] and Student[NAT] VDOMs only.
  C. Policy seq.# 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets.
  E. Policy seq # 1 will be installed on the Remote-FortiGate root[NAT] and Student[NAT] VDOMs only.

• Question 27:

  Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

  A. When FortiManager is auto-updated with configuration changes made directly on a managed device
  B. When changes to the device-level database are made on FortiManager
  C. When FortiManager installs device-level changes on a managed device
  D. When a configuration revision is reverted to a previous revision in the revision history
  A. When FortiManager is auto-updated with configuration changes made directly on a managed device
  C. When FortiManager installs device-level changes on a managed device

• Question 28:

  View the following exhibit.

  

  Which statement is true regarding this failed installation log?

  A. Policy ID 2 is installed without a source address
  B. Policy ID 2 will not be installed
  C. Policy ID 2 is installed in disabled state
  D. Policy ID 2 is installed without a source device
  B. Policy ID 2 will not be installed

• Question 29:

  Refer to the exhibit.

  

  Which statement is true about the FortiManager ADOM policy tab based on the API request?

  A. The API command has enabled both central NAT and interface policy on the policy tab.
  B. The API command has requested the policy tab permissions information only.
  C. The API command has failed when requesting policy tab permissions information.
  D. The API command has applied to customer with ID: 200.
  A. The API command has enabled both central NAT and interface policy on the policy tab.

• Question 30:

  Refer to the exhibit.

  

  An administrator wants to create a policy on the Staging ADOM in backup mode, and install it on the FortiGate device in the same ADOM. How can the administrator perform this task?

  A. The administrator must use the Policy and Objects section to create a policy first.
  B. The administrator must use the FortiManager script.
  C. The administrator must disable the FortiManager offline mode first.
  D. The administrator must change the ADOM mode to Advanced to bring the FortiManager online.
  B. The administrator must use the FortiManager script.