Fortinet NSE5_FMG-7.2 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-7.2 Online Questions & Answers

• Question 61:

  Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?

  A. NSX-T Service Template
  B. Security profiles
  C. SNMP
  D. Routing
  B. Security profiles

• Question 62:

  Which two settings are required for FortiManager Management Extension Applications (MEA)? (Choose two.)

  A. When you configure MEA, you must open TCP or UDP port 540.
  B. You must open the ports to the Fortinet registry
  C. You must create a MEA special policy on FortiManager using the super user profile
  D. The administrator must have the super user profile.
  B. You must open the ports to the Fortinet registry
  D. The administrator must have the super user profile.

• Question 63:

  You are moving managed FortiGate devices from one ADOM to a new ADOM. Which statement correctly describes the expected result?

  A. Any pending device settings will be installed automatically
  B. Any unused objects from a previous ADOM are moved to the new ADOM automatically
  C. The shared policy package will not be moved to the new ADOM
  D. Policy packages will be imported into the new ADOM automaticallyD
  C. The shared policy package will not be moved to the new ADOM

• Question 64:

  What is the purpose of the Policy Check feature on FortiManager?

  A. It provides recommendations for optimizing policies in a policy package.
  B. It provides recommendations to combine similar policy packages within an ADOM into one single policy package.
  C. It compares the policy packages with the revision history, and updates policy packages in the ADOM database.
  D. It merges and creates dynamic mappings for duplicate objects used in a policy package.
  A. It provides recommendations for optimizing policies in a policy package.

• Question 65:

  Refer to the following exhibit:

  

  Which of the following statements are true based on this configuration? (Choose two.)

  A. The same administrator can lock more than one ADOM at the same time
  B. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out
  C. Unlocking an ADOM will submit configuration changes automatically to the approval administrator
  D. Unlocking an ADOM will install configuration automatically on managed devices
  A. The same administrator can lock more than one ADOM at the same time
  B. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out

• Question 66:

  What does a policy package status of Modified indicate?

  A. FortiManager is unable to determine the policy package status
  B. The policy package was never imported after a device was registered on FortiManager
  C. The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager
  D. The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
  B. The policy package was never imported after a device was registered on FortiManager

• Question 67:

  Refer to the exhibit.

  

  An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes. What is the purpose of this command?

  A. It allows FortiGate to unset central management settings.
  B. It allows FortiGate to reboot and recover the previous configuration from its configuration file.
  C. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.
  D. It allows FortiGate to reboot and restore a previously working firmware image.
  B. It allows FortiGate to reboot and recover the previous configuration from its configuration file.

• Question 68:

  Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

  A. To push these changes to a managed device, it required an install operation to the managed FortiGate.
  B. Reverting to a previous revision history will generate a new version ID and remove all other history versions.
  C. Reverting to a previous revision history will tag the device settings status as Auto- Update.
  D. It will modify device-level database
  A. To push these changes to a managed device, it required an install operation to the managed FortiGate.
  D. It will modify device-level database

• Question 69:

  Refer to the exhibit.

  

  Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?

  A. FortiManager ignored the firewall service category General but created a new service category in its database.
  B. FortiManager ignored the firewall service category general and deleted the duplicate value In Its database
  C. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.
  D. FortiManager ignored the firewall service category General and did not update Its database with the value
  D. FortiManager ignored the firewall service category General and did not update Its database with the value

• Question 70:

  Refer to the exhibit.

  

  How will FortiManager try to get updates for antivirus and IPS?

  A. From the list of configured override servers or public FDN servers
  B. From the default server fds1.fortinet.com
  C. From the configured override server IP address 10.0.1.50 only
  D. From public FDNI server IP address with the fourth highest octet only
  C. From the configured override server IP address 10.0.1.50 only