NSE5_FMG-7.0 Practice Questions Preview

Question 1

Single choice

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

A
Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device
B
Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.
C
Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.
D
FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

Reveal answer details Close answer details

Correct answerC

Explanation

FortiManager_6.4_Study_Guide-Online ?page 346

FortiManager HA doesn't support IP takeover where an HA state transition is transparent to administrators.
If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:
1. Manually reconfigure one of the secondary devices to become the primary device 2. Reconfigure all other secondary devices to point to the new primary device

Question 2

Single choice

View the following exhibit.

Which statement is true regarding this failed installation log?

A
Policy ID 2 is installed without a source address
B
Policy ID 2 will not be installed
C
Policy ID 2 is installed in disabled state
D
Policy ID 2 is installed without a source device

Reveal answer details Close answer details

Correct answerD

Question 3

Single choice

Which configuration setting for FortiGate is part of a device-level database on FortiManager?

A
VIP and IP Pools
B
Firewall policies
C
Security profiles
D
Routing

Reveal answer details Close answer details

Correct answerD

Explanation

The FortiManager stores the FortiGate configuration details in two distinct databases. The device-level database includes configuration details related to device-level settings, such as interfaces, DNS, routing, and more. The ADOM-level database includes configuration details related to firewall policies, objects, and security profiles.

Question 4

Single choice

Refer to the exhibit.

An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.

When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A
192.168.0.1/24
B
10.200.1.0/24
C
It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.
D
Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

Reveal answer details Close answer details

Correct answerB

Explanation

FortiManager_6.4_Study_Guide-Online ?page 209

In the example, the dynamic address object LocalLan refers to the internal network address of the managed firewalls. The object has a default value of 192.168.1.0/24. The mapping rules are defined per device. For Remote-FortiGate, the address object LocalLan referes to 10.10.11.0/24. The devices in the ADOM that do not have dynamic mapping for LocalLan have a default value of 192.168.1.0/2.

Question 5

Multiple choice

Refer to the exhibit.

An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.

Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

A
The administrator logged in using the unsecure protocol HTTP, so the view is restricted.
B
The administrator profile does not have full access privileges like the Super_User profile.
C
The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.
D
FortiAnalyzer features are not enabled on FortiManager.

Reveal answer details Close answer details

Correct answersB, D

Question 6

Single choice

View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package.

When the install operation is performed, which IP Netmask will be installed on the Local- FortiGate, for the Training firewall address object?

A
10.0.1.0/24
B
It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
C
192.168.0.1/24
D
Local-FortiGate will automatically choose an IP Network based on its network interface settings.

Reveal answer details Close answer details

Correct answerA

Question 7

Single choice

You are moving managed FortiGate devices from one ADOM to a new ADOM.

Which statement correctly describes the expected result?

A
Any pending device settings will be installed automatically
B
Any unused objects from a previous ADOM are moved to the new ADOM automatically
C
The shared policy package will not be moved to the new ADOM
D
Policy packages will be imported into the new ADOM automaticallyD

Reveal answer details Close answer details

Correct answerC

Explanation

References:
https://community.fortinet.com/t5/FortiManager/Technical-Note-How-to-move-objects-to-new-ADOM-on-FortiManager/ta-p/198342

Question 8

Single choice

What will happen if FortiAnalyzer features are enabled on FortiManager?

A
FortiManager will reboot
B
FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager
C
FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices
D
FortiManager can be used only as a logging device.

Reveal answer details Close answer details

Correct answerA

Explanation

References:
https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1800_FAZ%20Features/0200_Enable%20FAZ%20Features.htm

Question 9

Single choice

View the following exhibit.

An administrator is importing a new device to FortiManager and has selected the shown options.

What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

A
The unused objects that are not tied to the firewall policies will be installed on FortiGate
B
The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
C
The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
D
The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database

Reveal answer details Close answer details

Correct answerC

Explanation

References:
https://community.fortinet.com/t5/FortiManager/Import-all-objects-Versus-Import-only-policy-dependent-objects/ta-p/193259?externalID=FD40392

Question 10

Multiple choice

Which two settings must be configured for SD-WAN Central Management? (Choose two.)

A
SD-WAN must be enabled on per-ADOM basis
B
You can create multiple SD-WAN interfaces per VDOM
C
When you configure an SD-WAN, you must specify at least two member interfaces.
D
The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

Reveal answer details Close answer details

Correct answersA, C

Question 11

Single choice

An administrator run the reload failure command: diagnose test deploymanager reload config <deviceid> on FortiManager.

What does this command do?

A
It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
B
It installs the latest configuration on the specified FortiGate and update the revision history database.
C
It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
D
It installs the provisioning template configuration on the specified FortiGate.

Reveal answer details Close answer details

Correct answerA

Explanation

References:
https://community.fortinet.com/t5/FortiManager/Technical-Note-Retrieve-configuration-file-using-CLI-from-a/ta-p/191000?externalID=FD36387