Fortinet Fortinet Certifications NSE5_FMG-7.2 Questions & Answers

• Question 81:

  View the following exhibit:

  

  An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager. What name will be used to display the firewall policy for port1?

  A. port1 on FortiGate and WAN on FortiManager

  B. port1 on both FortiGate and FortiManager

  C. WAN zone on FortiGate and WAN zone on FortiManager

  D. WAN zone on FortiGate and WAN interface on FortiManager

  Correct Answer: A

• Question 82:

  An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?

  A. Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.

  B. Changes to the AP's state must be performed directly on the managed FortiGate.

  C. Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.

  D. Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

  Correct Answer: D

• Question 83:

  What does thediagnose dvm check-integritycommand do? (Choose two.)

  A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

  B. Verifies and corrects unregistered, registered, and deleted device states

  C. Verifies and corrects database schemas in all object tables

  D. Verifies and corrects duplicate VDOM entries

  Correct Answer: BD

  6.2 Study Guide page 305verify and correct parts of the device manager databases, including:?inconsistent device-to-group and group-to-ADOM memberships?unregistered, registered, and deleted device states?device lock statuses? duplicate VDOM entries

• Question 84:

  Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?

  A. NSX-T Service Template

  B. Security profiles

  C. SNMP

  D. Routing

  Correct Answer: B

• Question 85:

  Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

  A. Managed gateways are devices managed by FortiManager in the same ADOM

  B. External gateways are third-party VPN gateway devices only

  C. Protected subnets are the subnets behind the device that you don't want to allow access to over the IPsec VPN

  D. Managed devices in other ADOMs must be treated as external gateways

  Correct Answer: AD

  Reference:http://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/1300_VPN_Manager/0800_IPsec_VPN_Gateway/0400_Create_mngd_gateway.htm

• Question 86:

  Refer to the exhibit.

  

  How will FortiManager try to get updates for antivirus and IPS?

  A. From the list of configured override servers or public FDN servers

  B. From the default server fds1.fortinet.com

  C. From the configured override server IP address 10.0.1.50 only

  D. From public FDNI server IP address with the fourth highest octet only

  Correct Answer: A

• Question 87:

  View the following exhibit.

  

  Which one of the following statements is true regarding the object named ALL?

  A. FortiManager updated the object ALL using FortiGate's value in its database

  B. FortiManager updated the object ALL using FortiManager's value in its database

  C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

  D. FortiManager installed the object ALL with the updated value.

  Correct Answer: A

• Question 88:

  An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces. Which interface must the administrator select in the static route device drop-down list?

  A. port2

  B. virtual-wan-link

  C. port1

  D. auto-discovery

  Correct Answer: B