Fortinet Fortinet Certifications NSE5_FMG-7.2 Questions & Answers

• Question 41:

  Refer to the exhibit.

  

  Which two statements about an ADOM set inNormalmode on FortiManager are true? (Choose two.)

  A. It supports the FortiManager script feature

  B. It allows making configuration changes for managed devices on FortiManager panes

  C. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate

  D. You cannot assign the same ADOM to multiple administrators

  Correct Answer: AB

  "FortiGate units in the ADOM will query their own configuration every 5 seconds. If there has been a configuration change, the FortiGate unit will send a diff revision on the change to the FortiManager using the FGFM protocol."

• Question 42:

  What is the purpose of ADOM revisions?

  A. To createSystem Checkpointsfor the FortiManager configuration.

  B. To save the current state of the whole ADOM.

  C. To save the current state of all policy packages and objects for an ADOM.

  D. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision

  Correct Answer: C

  Fortimanager 6.4 Study guide page 198

• Question 43:

  Refer to the exhibit.

  

  An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.

  Which two reasons can explain why the FortiAnalyzer feature panesdo notappear? (Choose two.)

  A. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.

  B. The administrator profile does not have full access privileges like theSuper_Userprofile.

  C. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.

  D. FortiAnalyzer features are not enabled on FortiManager.

  Correct Answer: BD

• Question 44:

  An administrator has enabledService Accesson FortiManager.

  What is the purpose ofService Accesson the FortiManager interface?

  A. Allows FortiManager to download IPS packages

  B. Allows FortiManager to respond to request for FortiGuard services from FortiGate devices

  C. Allows FortiManager to run real-time debugs on the managed devices

  D. Allows FortiManager to automatically configure a default route

  Correct Answer: B

  FortiManager 6.2 Study guide page 350

• Question 45:

  Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

  A. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration

  B. TheFabric Viewmodule enables you to generate the Security Fabric ratings for Security Fabric devices

  C. The Security Fabric settings are part of the device level settings

  D. TheFabric Viewmodule enables you to view the Security Fabric ratings for Security Fabric devices

  Correct Answer: CD

• Question 46:

  Which two statements regarding device management on FortiManager are true? (Choose two.)

  A. FortiGate devices in HA cluster devices are counted as a single device.

  B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

  C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

  D. The maximum number of managed devices for each ADOM is 500.

  Correct Answer: AC

• Question 47:

  Which two items are included in the FortiManager backup? (Choose two.)

  A. FortiGuard database

  B. Global database

  C. Logs

  D. All devices

  Correct Answer: BD

  Reference:https://kb.fortinet.com/kb/viewContent.do?externalId=FD34549

• Question 48:

  An administrator's PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash. How can the administrator unlock the ADOM?

  A. Restore the configuration from a previous backup.

  B. Log in asSuper_Userin order to unlock the ADOM.

  C. Log in using the same administrator account to unlock the ADOM.

  D. Delete the previous admin session manually through the FortiManager GUI or CLI.

  Correct Answer: D

• Question 49:

  Refer to the exhibit.

  

  Which two statements are true if the script is executed using theDevice Databaseoption? (Choose two.)

  A. You must install these changes using theInstall Wizardto a managed device

  B. The successful execution of a script on theDevice Databasewill create a new revision history

  C. The script history will show successful installation of the script on the remote FortiGate

  D. TheDevice Settings Statuswill be tagged asModified

  Correct Answer: AD

• Question 50:

  An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package,Fortinet, in the custom ADOM1. Which statement about the global policy package assignment to the newly-created policy packageFortinetis true?

  A. When a new policy package is created, it automatically assigns the global policies to the new package.

  B. When a new policy package is created, you need to assign the global policy package from the global ADOM.

  C. When a new policy package is created, you need to reapply the global policy package to the ADOM.

  D. When a new policy package is created, you can select the option to assign the global policies to the new package.

  Correct Answer: A

  Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).