Fortinet Fortinet Certifications NSE5_FMG-7.2 Questions & Answers

• Question 51:

  What does a policy package status ofModifiedindicate?

  A. FortiManager is unable to determine the policy package status

  B. The policy package was never imported after a device was registered on FortiManager

  C. The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager

  D. The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

  Correct Answer: B

  Reference:http://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/0800_Managing%20policy %20packages/2200_Policy%20Package%20Installation%20targets.htm

• Question 52:

  Refer to the exhibit.

  

  You ate using the Quick install option to install configuration changes on the managed FortiGate

  Which two statements correctly describe the result? (Choose two)

  A. It installs device-level changes on the FortiGate device without launching the Install Wizard

  B. It installs all the changes in the device database first and the administrator must reinstall the changes on the FodiGate device

  C. It provides the option to preview only the policy package changes before installing them

  D. It install provisioning template changes on the FortiGate device

  Correct Answer: AD

• Question 53:

  Push updates are failing on a FortiGate device that is located behind a NAT device Which two settings should the administrator check? (Choose two.)

  A. That the virtual IP address and correct ports are set on the NAT device

  B. That the NAT device IP address and correct ports are configured on FortiManager

  C. That the external IP address on the NAT device is set to DHCP and configured with the virtual IP

  D. That the override server IP address is set on FortiManager and the NAT device

  Correct Answer: BC

• Question 54:

  Refer to the exhibit.

  

  On FortiManager, an administrator created a new system template namedTrainingwith two new DNS addresses. During the installation preview stage, the administrator notices that central-management settings need to be purged.

  What can be the main reason for the central-management purge command?

  A. The Remote-FortiGate device does not have any DNS server-list configured in the central-management settings.

  B. The DNS addresses in the default system settings are the same as the Training system template.

  C. The ADOM is locked by another administrator.

  D. The Training system template has a default FortiGuard widget.

  Correct Answer: A

• Question 55:

  What will happen if FortiAnalyzer features are enabled on FortiManager?

  A. FortiManager will keep all the logs and reports on the FortiManager.

  B. FortiManager will enable ADOMs to collect logs automatically from non-FortiGate devices.

  C. FortiManager will install the logging configuration to the managed devices

  D. FortiManager can be used only as a logging device.

  Correct Answer: C

• Question 56:

  An administrator is in the process of moving the system template profile between ADOMs by running the following command:

  execute improfile import-profile ADOM2 3547 /tmp/myfile

  Where does the administrator import the file from?

  A. File system

  B. ADOM1

  C. ADOM2 object database

  D. ADOM2

  Correct Answer: A

• Question 57:

  Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

  A. When FortiManager is auto-updated with configuration changes made directly on a managed device

  B. When changes to the device-level database are made on FortiManager

  C. When FortiManager installs device-level changes on a managed device

  D. When a configuration revision is reverted to a previous revision in the revision history

  Correct Answer: BC

• Question 58:

  Refer to the exhibit.

  

  An administrator is about to add the FortiGate device to FortiManager using the discovery process FortiManager is operating behind a NAT device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings

  What is the expected result?

  A. During discovery FortiManager sets trie FortiManager NATed IP address on FortiGate

  B. During discovery FortiManager sets both tie FortiManager NATed IP address and NAT device IP address on FortiGate

  C. During discovery FortiManager sets the NATed device IP address on FortiGate

  D. During discovery FortiManager uses only the FortiGate serial number to establish the connection

  Correct Answer: C

• Question 59:

  An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?

  A. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route

  B. You must specify a gateway address when you create a default static route

  C. Remove all the interface references such as routes or policies

  D. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.

  Correct Answer: D

• Question 60:

  View the following exhibit.

  

  When usingInstall Configoption to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

  A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device

  B. Will not create new revision in the revision history

  C. Installs device-level changes to FortiGate without launching theInstall Wizard

  D. Provides the option to preview configuration changes prior to installing them

  Correct Answer: AC