Fortinet Fortinet Certifications NSE5_FMG-7.2 Questions & Answers

• Question 21:

  Refer to the exhibit.

  

  You are using theQuick Installoption to install configuration changes on the managed FortiGate. Which two statements correctly describe the result? (Choose two.)

  A. It will not create a new revision in the revision history

  B. It installs device-level changes to FortiGate without launching theInstall Wizard

  C. It cannot be canceled once initiated and changes will be installed on the managed device

  D. It provides the option to preview configuration changes prior to installing them

  Correct Answer: BC

  FortiManager_6.4_Study_Guide-Online page 164

  The Install Config option allows you to perform a quick installation of device-level settings without launching the Install Wizard. When you use this option, you cannot preview the changes prior to committing. Administrator should be certain of the changes before using this install option, because the install can't be cancelled after the process is initiated.

• Question 22:

  View the following exhibit.

  

  Which statement is true regarding this failed installation log?

  A. Policy ID 2 is installed without a source address

  B. Policy ID 2 will not be installed

  C. Policy ID 2 is installed in disabled state

  D. Policy ID 2 is installed without a source device

  Correct Answer: B

• Question 23:

  Refer to the exhibit.

  

  Which statement about the object named ALL is true?

  A. FortiManager updated the object ALL using the FortiGate value in its database.

  B. FortiManager installed the object ALL with the updated value.

  C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

  D. FortiManager updated the object ALL using the FortiManager value in its database.

  Correct Answer: A

• Question 24:

  An administrator, Trainer, who is assigned theSuper_Userprofile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session. What can prevent an admin account that hasSuper_Userrights over the device from approving a workflow session?

  

  A. Trainer is not a part of workflow approval group

  B. Trainer does not have full rights over this ADOM

  C. Trainer must close Student's workflow session before approving the request

  D. Student, who submitted the workflow session, must first self-approve the request

  Correct Answer: A

  Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/0800_ADOMs/1800_Workflow/0600_Workflow%20sessions.htm

• Question 25:

  View the following exhibit.

  

  What is the purpose of settingADOM ModetoAdvanced?

  A. The setting allows automatic updates to the policy package configuration for a managed device

  B. The setting enables the ADOMs feature on FortiManager

  C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.

  D. The setting disables concurrent ADOM access and adds ADOM locking

  Correct Answer: C

  Reference:https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/66530/adom-device-modes

• Question 26:

  Which two items does an FGFM keepalive message include? (Choose two.)

  A. FortiGate uptime

  B. FortiGate license information

  C. FortiGate IPS version

  D. FortiGate configuration checksum

  Correct Answer: CD

  Reference:https://docs.fortinet.com/document/fortimanager/6.2.0/fortigate-fortimanager-communications-protocol-guide/579138/keep-alive-messages

• Question 27:

  View the following exhibit:

  

  Which two statements are true if the script is executed using theRemote FortiGate Directly (via CLI)option? (Choose two.)

  A. You must install these changes usingInstall Wizard

  B. FortiGate will auto-update the FortiManager's device-level database.

  C. FortiManager will create a new revision history.

  D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

  Correct Answer: BC

• Question 28:

  An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

  A. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package

  B. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.

  C. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

  D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

  Correct Answer: A

  Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/0800_Managing%20policy %20packages/1200_Assign%20a%20global%20policy%20package.htm

• Question 29:

  View the following exhibit.

  

  Given the configurations shown in the exhibit, what can you conclude from the installation targets in theInstall Oncolumn?

  A. The Install On column value represents successful installation on the managed devices

  B. Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

  C. Policy seq#3 will be installed on the Trainer[NAT] VDOM only

  D. Policy seq#3 will be not installed on any managed device

  Correct Answer: B

• Question 30:

  View the following exhibit.

  

  An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

  A. The unused objects that are not tied to the firewall policies will be installed on FortiGate

  B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate

  C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

  D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database

  Correct Answer: C

  Reference:https://community.fortinet.com/t5/FortiManager/Import-all-objects-Versus-Import-only-policy-dependent-objects/ta-p/193259?externalID=FD40392