Fortinet NSE5_FMG-7.2 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-7.2 Online Questions & Answers

• Question 81:

  Refer to the exhibit.

  

  A junior administrator is troubleshooting a FortiManager connectivity issue that rs occurring with managed FortiGate devices Given the FortiManager device manager settings shown in the exhibit what can you conclude from the exhibit?

  A. The administrator had restored the FortiManager configuration file
  B. The administrator must refresh both devices to restore connectivity
  C. FortiManager test internet connectivity therefore, both devices appear to be down
  D. The administrator can reclaim the FGFM tunnel to get both devices online
  D. The administrator can reclaim the FGFM tunnel to get both devices online

• Question 82:

  Refer to the exhibit.

  

  In the event that the monitored interface for the primary FortiManager device fails, which statement is true about FortiManager HA?

  A. Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.
  B. Reboot the failed device to remove its IP from the primary device.
  C. Reconfigure the primary device lo remove the peer IP of the failed device.
  D. The FortiManager HAfailover is transparent to administrators and does not require any reconfiguration.
  D. The FortiManager HAfailover is transparent to administrators and does not require any reconfiguration.

• Question 83:

  Refer to the exhibit.

  

  An administrator would like to create three ADOMs on FortiManager with different access levels based on departments. What two conclusions can you draw from the design shown in the exhibit? (Choose two.)

  A. Admin A can access VDOM2 and VDOM3 with the super user profile.
  B. The FortiManager policies and objects database can be shared between the Financial and HR ADOMs.
  C. The administrator must set the FortiManager ADOM mode to Advanced.
  D. The administrator must configure FortiManager in workspace mode.
  B. The FortiManager policies and objects database can be shared between the Financial and HR ADOMs.
  C. The administrator must set the FortiManager ADOM mode to Advanced.

• Question 84:

  What are two outcomes of ADOM revisions? (Choose two.)

  A. ADOM revisions can significantly increase the size of the configuration backups.
  B. ADOM revisions can save the current size of the whole ADOM
  C. ADOM revisions can create System Checkpoints for the FortiManager configuration
  D. ADOM revisions can save the current state of all policy packages and objects for an ADOM
  A. ADOM revisions can significantly increase the size of the configuration backups.
  D. ADOM revisions can save the current state of all policy packages and objects for an ADOM

• Question 85:

  An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package Fortinet in the custom ADOM1. What will happen to the Fortinet policy package when it is created?

  A. You need to assign the global policy package from the global ADOM
  B. You need to reapply the global poky package to the ADOM
  C. it automatically assigns the global policies
  D. You can select the option to assign the global polices
  C. it automatically assigns the global policies

• Question 86:

  What does a policy package status of Conflict indicate?

  A. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.
  B. The policy package does not have a FortiGate as the installation target.
  C. The policy package configuration has been changed on both FortiManager and the managed device independently.
  D. The policy configuration has never been imported after a device was registered on FortiManager.
  C. The policy package configuration has been changed on both FortiManager and the managed device independently.

• Question 87:

  An administrator has enabled Service Access on FortiManager.

  What is the purpose of Service Access on the FortiManager interface?

  A. Allows FortiManager to download IPS packages
  B. Allows FortiManager to respond to request for FortiGuard services from FortiGate devices
  C. Allows FortiManager to run real-time debugs on the managed devices
  D. Allows FortiManager to automatically configure a default route
  B. Allows FortiManager to respond to request for FortiGuard services from FortiGate devices

• Question 88:

  An administrator has added all the devices in a Security Fabric group to FortiManager. How does the administrator identify the root FortiGate?

  A. By a dollar symbol ($) at the end of the device name
  B. By an at symbol (@) at the end of the device name
  C. By a QUESTION NO: mark(?) at the end of the device name
  D. By an Asterisk (*) at the end of the device name
  D. By an Asterisk (*) at the end of the device name

• Question 89:

  View the following exhibit.

  

  When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

  A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
  B. Will not create new revision in the revision history
  C. Installs device-level changes to FortiGate without launching the Install Wizard
  D. Provides the option to preview configuration changes prior to installing them
  A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
  C. Installs device-level changes to FortiGate without launching the Install Wizard

• Question 90:

  An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces. Which interface must the administrator select in the static route device drop-down list?

  A. port2
  B. virtual-wan-link
  C. port1
  D. auto-discovery
  B. virtual-wan-link