Fortinet Fortinet Certifications NSE5_FMG-7.2 Questions & Answers

• Question 61:

  Which two settings are required for FortiManager Management Extension Applications (MEA)? (Choose two.)

  A. When you configure MEA, you must open TCP or UDP port 540.

  B. You must open the ports to the Fortinet registry

  C. You must create a MEA special policy on FortiManager using the super user profile

  D. The administrator must have the super user profile.

  Correct Answer: CD

• Question 62:

  An administrator is replacing a failed device on FortiManager by running the following command:

  execute device replace sn .

  Which device name and serial number must the administrator use?

  A. The device name of the new device and serial number of the failed device

  B. The device name and serial number of the failed device

  C. The device name of the failed device and serial number of the new device

  D. The device name and serial number of the new device

  Correct Answer: C

• Question 63:

  An administrator created a header and footer global policy package and assigned it to an ADOM. What are two outcomes from this action? (Choose two.)

  A. You must manually move the header and footer policies after the policy assignment.

  B. After you assign the global policy package to an ADOM, the policy package is hidden from the ADOM and cannot be viewed.

  C. If you assign an additional global policy package to the same ADOM, FortiManaqer removes previously assigned policies.

  D. You can edit or delete all the global objects in the global ADOM.

  Correct Answer: AD

• Question 64:

  View the following exhibit.

  

  Which of the following statements are true based on this configuration setting? (Choose two.)

  A. This setting will enable the ADOMs feature on FortiManager.

  B. This setting is applied globally to all ADOMs.

  C. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.

  D. This setting will allow automatic updates to the policy package configuration for a managed device.

  Correct Answer: BC

• Question 65:

  In the event that one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?

  A. The FortiManaqer HA state transition is transparent to administrators and does not require any reconfiguration.

  B. Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.

  C. Reconfigure the primary device to remove the peer IP of the failed device.

  D. Reboot the failed device to remove its IP from the primary device.

  Correct Answer: C

• Question 66:

  What is the advantage of using FortiManager to manage PortiAnalyzer?

  A. It allows FortiManager to manage all FortiGate devices

  B. It allows FortiManager to fun reports based on FortiAnalyzer

  C. It allows FortiManager to store all managed FortiGate device logs

  D. It allows FortiManager to act as a collector and FortiAnalyzer device

  Correct Answer: D

• Question 67:

  Refer to the exhibit.

  

  An administrator would like to create three ADOMs on FortiManager with different access levels based on departments. What two conclusions can you draw from the design shown in the exhibit? (Choose two.)

  A. Admin A can access VDOM2 and VDOM3 with the super user profile.

  B. The FortiManager policies and objects database can be shared between the Financial and HR ADOMs.

  C. The administrator must set the FortiManager ADOM mode to Advanced.

  D. The administrator must configure FortiManager in workspace mode.

  Correct Answer: BC

• Question 68:

  In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric. Given the administrator's actions, which statement correctly describes the expected result?

  A. The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.

  B. The authorized FortiGate will be automatically added to the Training ADOM.

  C. The authorized FortiGate will appear in the root ADOM.

  D. The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors.

  Correct Answer: C

• Question 69:

  D. By an Asterisk (*) at the end of the device name

  Correct Answer: D

• Question 70:

  An administrator has assigned a global policy package to custom ADOM. Then the administrator creates a new policy package Fortinet in the custom ADOM. What will happen to the Fortinet policy package when it is created?

  A. You need to assign the global policy package from the global ADOM

  B. You need to reapply the global poky package to the ADOM

  C. it automatically assigns the global policies

  D. You can select the option to assign the global polices

  Correct Answer: C