Winter Special Sale Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 713PS592

NSE5_FMG-7.2 Fortinet NSE 5 - FortiManager 7.2 Questions and Answers

Questions 4

Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

Options:

A.

The Security Fabric license, group name and password are required for the FortiManager Security Fabric

integration

B.

The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices

C.

The Security Fabric settings are part of the device level settings

D.

The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices

Buy Now
Questions 5

Refer to the exhibit.

NSE5_FMG-7.2 Question 5

Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

Options:

A.

It supports the FortiManager script feature

B.

It allows making configuration changes for managed devices on FortiManager panes

C.

FortiManager automatically installs the configuration difference in revisions on the managed FortiGate

D.

You cannot assign the same ADOM to multiple administrators

Buy Now
Questions 6

An administrator is replacing a device on FortiManager by running the following command:

execute device replace sn .

What device name and serial number must the administrator use?

Options:

A.

Device name and serial number of the original device.

B.

Device name and serial number of the replacement device.

C.

Device name of the replacement device and serial number of the original device.

D.

Device name of the original device and serial number of the replacement device.

Buy Now
Questions 7

Refer to the exhibit.

NSE5_FMG-7.2 Question 7

An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.

Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

Options:

A.

The administrator logged in using the unsecure protocol HTTP, so the view is restricted.

B.

The administrator profile does not have full access privileges like the Super_User profile.

C.

The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.

D.

FortiAnalyzer features are not enabled on FortiManager.

Buy Now
Questions 8

An administrator would like to create an SD-WAN using central management. What steps does the

administrator need to perform to create an SD-WAN using central management?

Options:

A.

First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route

B.

You must specify a gateway address when you create a default static route

C.

Remove all the interface references such as routes or policies

D.

Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.

Buy Now
Questions 9

Refer to the exhibit.

NSE5_FMG-7.2 Question 9

In the event that the monitored interface for the primary FortiManager device fails, which statement is true about FortiManager HA?

Options:

A.

Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.

B.

Reboot the failed device to remove its IP from the primary device.

C.

Reconfigure the primary device lo remove the peer IP of the failed device.

D.

The FortiManager HAfailover is transparent to administrators and does not require any reconfiguration.

Buy Now
Questions 10

An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?

Options:

A.

It allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.

B.

It allows FortiManager to determine the connection status of managed devices.

C.

It allows administrative access to FortiManager.

D.

It allows third-party applications to gain read/write access to FortiManager.

Buy Now
Questions 11

View the following exhibit:

NSE5_FMG-7.2 Question 11

An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager. What name will be used to display the firewall policy for port1?

Options:

A.

port1 on FortiGate and WAN on FortiManager

B.

port1 on both FortiGate and FortiManager

C.

WAN zone on FortiGate and WAN zone on FortiManager

D.

WAN zone on FortiGate and WAN interface on FortiManager

Buy Now
Questions 12

Refer to the exhibit showing a Download Import Report.

Why is it failing to import firewall policy ID 1?

Options:

A.

Policy ID 1 is configured from the interface any to port6. FortiManager rejects the request to import this policy because the any interface does not exist on FortiManager.

B.

The address object used in policy ID 1 already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.

C.

Policy ID 1 does not have the ADOM Interface mapping configured on FortiManager.

D.

Policy ID 1 for this managed FortiGate already exists on FortiManager in the policy package named Remote-FortiGate.

Buy Now
Questions 13

An administrator has added all the devices in a Security Fabric group to FortiManager.

How does the administrator identify the root FortiGate?

Options:

A.

By a dollar symbol ($) at the end of the device name

B.

By an at symbol (@) at the end of the device name

C.

By a QUESTION NO: mark(?) at the end of the device name

D.

By an Asterisk (*) at the end of the device name

Buy Now
Questions 14

Refer to the exhibit.

NSE5_FMG-7.2 Question 14

A junior administrator is troubleshooting a FortiManager connectivity issue that rs occurring with managed FortiGate devices

Given the FortiManager device manager settings shown in the exhibit what can you conclude from the exhibit?

Options:

A.

The administrator had restored the FortiManager configuration file

B.

The administrator must refresh both devices to restore connectivity

C.

FortiManager test internet connectivity therefore, both devices appear to be down

D.

The administrator can reclaim the FGFM tunnel to get both devices online

Buy Now
Questions 15

Refer to the exhibit.

NSE5_FMG-7.2 Question 15

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM, which has four policy packages. The customer administrator has access onlytoMy_ADOM.

How can customer or service provider administrators remove both global header and footer policies from the policy package named Shared_Package?

Options:

A.

The service provider administrator can unassign both policies from the global ADOM.

B.

The service provider administrator can unassign both global policies from My_ADOM.

C.

The customer administrator can unassign both polices by locking My_ADOM.

D.

The customer administrator can unassign both global polices from My_ADOM.

Buy Now
Questions 16

An administrator is replacing a failed device on FortiManager by running the following command:

execute device replace sn .

Which device name and serial number must the administrator use?

Options:

A.

The device name of the new device and serial number of the failed device

B.

The device name and serial number of the failed device

C.

The device name of the failed device and serial number of the new device

D.

The device name and serial number of the new device

Buy Now
Questions 17

What is the purpose of the Policy Check feature on FortiManager?

Options:

A.

It provides recommendations for optimizing policies in a policy package.

B.

It provides recommendations to combine similar policy packages within an ADOM into one single policy package.

C.

It compares the policy packages with the revision history, and updates policy packages in the ADOM database.

D.

It merges and creates dynamic mappings for duplicate objects used in a policy package.

Buy Now
Questions 18

Which two items does an FGFM keepalive message include? (Choose two.)

Options:

A.

FortiGate uptime

B.

FortiGate license information

C.

FortiGate IPS version

D.

FortiGate configuration checksum

Buy Now
Questions 19

Which configuration setting for FortiGate is part of a device-level database on FortiManager?

Options:

A.

VIP and IP Pools

B.

Firewall policies

C.

Security profiles

D.

Routing

Buy Now
Questions 20

Refer to the exhibits.

Exhibit one.

NSE5_FMG-7.2 Question 20

Exhibit two.

NSE5_FMG-7.2 Question 20

An administrator created a new system template named Training with two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed.

What can be the main reason for these unset commands?

Options:

A.

The DNS addresses in the default system settings are the same as the Training system template

B.

The Training system template has other default settings

C.

The ADOM is locked by another administrator

D.

The Training system template does not have assigned devices

Buy Now
Questions 21

View the following exhibit.

NSE5_FMG-7.2 Question 21

Which statement is true regarding this failed installation log?

Options:

A.

Policy ID 2 is installed without a source address

B.

Policy ID 2 will not be installed

C.

Policy ID 2 is installed in disabled state

D.

Policy ID 2 is installed without a source device

Buy Now
Questions 22

An administrator would like to create an SD-WAN using central management in the Training ADOM.

To create an SD-WAN using central management, which two steps must be completed? (Choose two.)

Options:

A.

Specify a gateway address when you create a default SD-WAN static route

B.

Enable SD-WAN central management in the Training ADOM

C.

Configure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN

template settings

D.

Remove all the interface references such as routes or policies that will be a part of SD-WAN member

interfaces

Buy Now
Questions 23

In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

Options:

A.

The FortiGate will be added automatically to the default ADOM named FortiGate.

B.

The FortiGate will be automatically added to the Training ADOM.

C.

By default, the unregistered FortiGate will appear in the root ADOM.

D.

The FortiManager administrator must add the unregistered device manually to the unregistered device

manually to the Training ADOM using the Add Device wizard

Buy Now
Questions 24

View the following exhibit:

NSE5_FMG-7.2 Question 24

How will FortiManager try to get updates for antivirus and IPS?

Options:

A.

From the list of configured override servers with ability to fall back to public FDN servers

B.

From the configured override server list only

C.

From the default server fdsl.fortinet.com

D.

From public FDNI server with highest index number only

Buy Now
Questions 25

What are two outcomes of ADOM revisions? (Choose two.)

Options:

A.

ADOM revisions can significantly increase the size of the configuration backups.

B.

ADOM revisions can save the current size of the whole ADOM

C.

ADOM revisions can create System Checkpoints for the FortiManager configuration

D.

ADOM revisions can save the current state of all policy packages and objects for an ADOM

Buy Now
Questions 26

View the following exhibit:

NSE5_FMG-7.2 Question 26

Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI) option? (Choose two.)

Options:

A.

You must install these changes using Install Wizard

B.

FortiGate will auto-update the FortiManager’s device-level database.

C.

FortiManager will create a new revision history.

D.

FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

Buy Now
Questions 27

Refer to the exhibit.

NSE5_FMG-7.2 Question 27

Which two statements about the output are true? (Choose two.)

Options:

A.

The latest revision history for the managed FortiGate does match with the FortiGate running configuration

B.

Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed

C.

The latest history for the managed FortiGate does not match with the device-level database

D.

Configuration changes directly made on the FortiGate have been automatically updated to device-level

database

Buy Now
Questions 28

An administrator’s PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.

How can the administrator unlock the ADOM?

Options:

A.

Restore the configuration from a previous backup.

B.

Log in as Super_User in order to unlock the ADOM.

C.

Log in using the same administrator account to unlock the ADOM.

D.

Delete the previous admin session manually through the FortiManager GUI or CLI.

Buy Now
Questions 29

Which two statements regarding device management on FortiManager are true? (Choose two.)

Options:

A.

FortiGate devices in HA cluster devices are counted as a single device.

B.

FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

C.

FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

D.

The maximum number of managed devices for each ADOM is 500.

Buy Now
Questions 30

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.

Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

Options:

A.

When a new policy package is created, it automatically assigns the global policies to the new package.

B.

When a new policy package is created, you need to assign the global policy package from the global

ADOM.

C.

When a new policy package is created, you need to reapply the global policy package to the ADOM.

D.

When a new policy package is created, you can select the option to assign the global policies to the new package.

Buy Now
Exam Code: NSE5_FMG-7.2
Exam Name: Fortinet NSE 5 - FortiManager 7.2
Last Update: Dec 3, 2024
Questions: 101

PDF + Testing Engine

$66  $164.99

Testing Engine

$50  $124.99
buy now NSE5_FMG-7.2 testing engine

PDF (Q&A)

$42  $104.99
buy now NSE5_FMG-7.2 pdf