Fortinet Fortinet Certifications NSE5_FMG-7.2 Questions & Answers

• Question 31:

  In addition to the default ADOMs, an administrator has created a new ADOM namedTrainingfor FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

  A. The FortiGate will be added automatically to the default ADOM named FortiGate.

  B. The FortiGate will be automatically added to the Training ADOM.

  C. By default, the unregistered FortiGate will appear in the root ADOM.

  D. The FortiManager administrator must add the unregistered device manually to the unregistered device manually to the Training ADOM using the Add Device wizard

  Correct Answer: C

  Reference:https://docs.fortinet.com/document/fortimanager/7.0.0/administration-guide/718923/root-adom

• Question 32:

  An administrator wants to delete an address object that is currently referenced in a firewall policy. What can the administrator expect to happen?

  A. FortiManager will not allow the administrator to delete a referenced address object

  B. FortiManager will disable the status of the referenced firewall policy

  C. FortiManager will replace the deleted address object with thenoneaddress object in the referenced firewall policy

  D. FortiManager will replace the deleted address object withalladdress object in the referenced firewall policy

  Correct Answer: C

  Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/1200_Managing%20objects/0800_Remove%20an%20object.htm

• Question 33:

  Refer to the exhibit.

  

  Which two statements about the output are true? (Choose two.)

  A. The latest revision history for the managed FortiGate does match with the FortiGate running configuration

  B. Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed

  C. The latest history for the managed FortiGate does not match with the device-level database

  D. Configuration changes directly made on the FortiGate have been automatically updated to device-level database

  Correct Answer: AC

• Question 34:

  Refer to the exhibit.

  

  An administrator has created a firewall address object,Trainingwhich is used in the Local-FortiGate policy package.

  When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for theTrainingfirewall address object?

  A. 192.168.0.1/24

  B. 10.200.1.0/24

  C. It will create a firewall address group on Local-FortiGate with192.168.0.1/24and10.0.1.0/24object values.

  D. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

  Correct Answer: B

• Question 35:

  What will be the result of reverting to a previous revision version in the revision history?

  A. It will install configuration changes to managed device automatically

  B. It will tag the device settings status asAuto-Update

  C. It will generate a new versionIDand remove all other revision history versions

  D. It will modify the device-level database

  Correct Answer: D

• Question 36:

  What does a policy package status ofConflictindicate?

  A. The policy package reports inconsistencies and conflicts during aPolicy Consistency Check.

  B. The policy package does not have a FortiGate as the installation target.

  C. The policy package configuration has been changed on both FortiManager and the managed device independently.

  D. The policy configuration has never been imported after a device was registered on FortiManager.

  Correct Answer: C

• Question 37:

  Refer to the exhibit.

  

  An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes. What is the purpose of this command?

  A. It allows FortiGate to unset central management settings.

  B. It allows FortiGate to reboot and recover the previous configuration from its configuration file.

  C. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

  D. It allows FortiGate to reboot and restore a previously working firmware image.

  Correct Answer: B

  Reference:https://docs.fortinet.com/document/fortimanager/6.2.0/fortigate-fortimanager-communicationsprotocol-guide/141304/fgfm-recovery-logic

• Question 38:

  An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the managed FortiGate. In which database will the configuration be saved?

  A. Device-level database

  B. Revision history database

  C. ADOM-level database

  D. Configuration-level database

  Correct Answer: C

  https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942

• Question 39:

  Refer to the exhibit.

  

  Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

  A. It allows two or more administrators to make configuration changes at the same time, in the same ADOM.

  B. It disables concurrent read-write access to an ADOM.

  C. It allows the same administrator to lock more than one ADOM at the same time.

  D. It is used to validate administrator login attempts through external servers.

  Correct Answer: BC

  Reference:https://docs.fortinet.com/document/fortimanager/6.0.4/administration-guide/86456/concurrentadom-access

• Question 40:

  An administrator is replacing a device on FortiManager by running the following command:

  execute device replace sn .

  What device name and serial number must the administrator use?

  A. Device name and serial number of the original device.

  B. Device name and serial number of the replacement device.

  C. Device name of the replacement device and serial number of the original device.

  D. Device name of the original device and serial number of the replacement device.

  Correct Answer: D