NSE5_FMG-7.2 Practice Questions Preview

Question 1

Single choice

Refer to the exhibit showing a Download Import Report.

Why is it failing to import firewall policy ID 1?

A
Policy ID 1 is configured from the interface any to port6. FortiManager rejects the request to import this policy because the any interface does not exist on FortiManager.
B
The address object used in policy ID 1 already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.
C
Policy ID 1 does not have the ADOM Interface mapping configured on FortiManager.
D
Policy ID 1 for this managed FortiGate already exists on FortiManager in the policy package named Remote-FortiGate.

Reveal answer details Close answer details

Correct answerB

Question 2

Multiple choice

Which two settings must be configured for SD-WAN Central Management? (Choose two.)

A
SD-WAN must be enabled on per-ADOM basis
B
You can create multiple SD-WAN interfaces per VDOM
C
When you configure an SD-WAN, you must specify at least two member interfaces.
D
The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

Reveal answer details Close answer details

Correct answersA, C

Question 3

Single choice

An administrator has added all the devices in a Security Fabric group to FortiManager.

How does the administrator identify the root FortiGate?

A
By a dollar symbol ($) at the end of the device name
B
By an at symbol (@) at the end of the device name
C
By a QUESTION NO: mark(?) at the end of the device name
D
By an Asterisk (*) at the end of the device name

Reveal answer details Close answer details

Correct answerD

Question 4

Multiple choice

Which two statements about the scheduled backup of FortiManager are true? (Choose two.)

A
It does not back up firmware images saved on FortiManager.
B
It can be configured using the CLI and GUI.
C
It backs up all devices and the FortiGuard database.
D
It supports FTP, SCP, and SFTP.

Reveal answer details Close answer details

Correct answersA, D

Question 5

Single choice

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.

Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

A
When a new policy package is created, it automatically assigns the global policies to the new package.
B
When a new policy package is created, you need to assign the global policy package from the global ADOM.
C
When a new policy package is created, you need to reapply the global policy package to the ADOM.
D
When a new policy package is created, you can select the option to assign the global policies to the new package.

Reveal answer details Close answer details

Correct answerA

Question 6

Single choice

Refer to the exhibit.

An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.

After the installation operation is performed, which IP/netmask will be shown on FortiManager for this firewall address object without specify Per-Device Mapping?

A
The FortiManager replaces the address object to none.
B
0.0.0.0/0.
C
192.168.1.0/24.
D
10.0.5.0/24.

Reveal answer details Close answer details

Correct answerC

Question 7

Multiple choice

Which of the following statements are true regarding VPN Manager? (Choose three.)

A
VPN Manager must be enabled on a per ADOM basis.
B
VPN Manager automatically adds newly-registered devices to a VPN community.
C
VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
D
Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
E
VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

Reveal answer details Close answer details

Correct answersA, C, D

Question 8

Single choice

What will happen if FortiAnalyzer features are enabled on FortiManager?

A
FortiManager will reboot
B
FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager
C
FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices
D
FortiManager can be used only as a logging device.

Reveal answer details Close answer details

Correct answerA

Question 9

Single choice

In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate.

Which one of the following statements is true?

A
The FortiGate will be added automatically to the default ADOM named FortiGate.
B
The FortiGate will be automatically added to the Training ADOM.
C
By default, the unregistered FortiGate will appear in the root ADOM.
D
The FortiManager administrator must add the unregistered device manually to the unregistered device manually to the Training ADOM using the Add Device wizard

Reveal answer details Close answer details

Correct answerC

Question 10

Single choice

Refer to the exhibit.

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM, which has four policy packages. The customer administrator has access onlytoMy_ADOM.

How can customer or service provider administrators remove both global header and footer policies from the policy package named Shared_Package?

A
The service provider administrator can unassign both policies from the global ADOM.
B
The service provider administrator can unassign both global policies from My_ADOM.
C
The customer administrator can unassign both polices by locking My_ADOM.
D
The customer administrator can unassign both global polices from My_ADOM.

Reveal answer details Close answer details

Correct answerA

Question 11

Single choice

An administrator run the reload failure command: diagnose test deploymanager reload config <deviceid> on FortiManager.

What does this command do?

A
It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
B
It installs the latest configuration on the specified FortiGate and update the revision history database.
C
It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
D
It installs the provisioning template configuration on the specified FortiGate.

Reveal answer details Close answer details

Correct answerA

Question 12

Single choice

What is the purpose of ADOM revisions?

A
To create System Checkpoints for the FortiManager configuration.
B
To save the current state of the whole ADOM.
C
To save the current state of all policy packages and objects for an ADOM.
D
To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a
specific ADOM revision

Reveal answer details Close answer details

Correct answerC

Question 13

Single choice

An administrator would like to authorize a newly-installed AP using AP Manager.

What steps does the administrator need to perform to authorize an AP?

A
Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.
B
Changes to the AP's state must be performed directly on the managed FortiGate.
C
Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.
D
Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

Reveal answer details Close answer details

Correct answerD

Question 14

Single choice

View the following exhibit:

An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager.

What name will be used to display the firewall policy for port1?

A
port1 on FortiGate and WAN on FortiManager
B
port1 on both FortiGate and FortiManager
C
WAN zone on FortiGate and WAN zone on FortiManager
D
WAN zone on FortiGate and WAN interface on FortiManager

Reveal answer details Close answer details

Correct answerA

Question 15

Single choice

Refer to the exhibit.

According to the error message why is FortiManager failing to add the FortiAnalyzer device?

A
The administrator must turn off the Use Legacy Device login and add the FortiAnalyzer device to the same network as Forti-Manager
B
The administrator must select the Forti-Manager administrative access checkbox on the FortiAnalyzer management interface
C
The administrator must use the Add Model Device section and discover the FortiAnalyzer device
D
The administrator must use the correct user name and password of the FortiAnalyzer device

Reveal answer details Close answer details

Correct answerB

Question 16

Single choice

What does a policy package status of Never Installed indicate?

A
The policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager.
B
FortiManager is unable to determine the policy package status.
C
The policy configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
D
The policy package was never imported after a device was registered on FortiManager

Reveal answer details Close answer details

Correct answerD