Test Online NSE5_FMG-7.2 Dumps Questions to Be Certified

To help prepare for the NSE5_FMG-7.2 exam, you may want to consider using NSE5_FMG-7.2 exam dumps questions. These questions are designed to test your knowledge and understanding of the topics covered on the exam. The more you practice answering NSE5_FMG-7.2 dumps questions, the more comfortable you will become with the exam format and the types of questions you can expect to see. NSE5_FMG-7.2 dumps can help reduce anxiety on exam day and improve your chances of success. Go and test free NSE5_FMG-7.2 exam dumps questions here.

Page 1 of 3

1. Refer to the exhibit.





An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.

What is the purpose of this command?

It allows FortiGate to unset central management settings.

It allows FortiGate to reboot and recover the previous configuration from its configuration file.

It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

It allows FortiGate to reboot and restore a previously working firmware image.

 Loading...

2. An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.

What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

Trainer is not a part of workflow approval group

Trainer does not have full rights over this ADOM

Trainer must close Student’s workflow session before approving the request

Student, who submitted the workflow session, must first self-approve the request

 Loading...

3. Refer to the exhibit.





Given the configuration shown in the exhibit, what can you conclude from the installation targets m the Install On column? (Choose two)

Policy seq # 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target

Policy seq # 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

Policy seq # 1 will be installed on the Remoto-FortiGate root[NAT] and Student[NAT] VDOMs only

Policy 3 will be installed on all FortiGate devices and vdom belongs to the ADOM

Policy seq # 3 will be skipped because no installation targets are specified

 Loading...

4. What does the diagnose dvm check-integrity command do? (Choose two.)

Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

Verifies and corrects unregistered, registered, and deleted device states

Verifies and corrects database schemas in all object tables

Verifies and corrects duplicate VDOM entries

 Loading...

5. View the following exhibit:





How will FortiManager try to get updates for antivirus and IPS?

From the list of configured override servers with ability to fall back to public FDN servers

From the configured override server list only

From the default server fdsl.fortinet.com

From public FDNI server with highest index number only

 Loading...

6. An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the managed FortiGate.

In which database will the configuration be saved?

Device-level database

Revision history database

ADOM-level database

Configuration-level database

 Loading...

7. When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

FortiManager will revert and install a previous configuration revision on the managed FortiGate.

FortiGate will reject the CLI commands that will cause the tunnel to go down.

FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.

 Loading...

8. View the following exhibit, which shows the Download Import Report:





Why it is failing to import firewall policy ID 2?

The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

 Loading...

9. What is the purpose of the Policy Check feature on FortiManager?

To find and provide recommendation to combine multiple separate policy packages into one common policy package

To find and merge duplicate policies in the policy package

To find and provide recommendation for optimizing policies in a policy package

To find and delete disabled firewall policies in the policy package

 Loading...

10. Which two settings must be configured for SD-WAN Central Management? (Choose two.)

SD-WAN must be enabled on per-ADOM basis

You can create multiple SD-WAN interfaces per VDOM

When you configure an SD-WAN, you must specify at least two member interfaces.

The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

 Loading...

Page 2 of 3

11. An administrator has added all the devices in a Security Fabric group to FortiManager.

How does the administrator identify the root FortiGate?

By a dollar symbol ($) at the end of the device name

By an at symbol (@) at the end of the device name

By a Question NO: mark(?) at the end of the device name

By an Asterisk (*) at the end of the device name

 Loading...

12. What are two outcomes of ADOM revisions? (Choose two.)

ADOM revisions can significantly increase the size of the configuration backups.

ADOM revisions can save the current size of the whole ADOM

ADOM revisions can create System Checkpoints for the FortiManager configuration

ADOM revisions can save the current state of all policy packages and objects for an ADOM

 Loading...

13. Which of the following statements are true regarding VPN Manager? (Choose three.)

VPN Manager must be enabled on a per ADOM basis.

VPN Manager automatically adds newly-registered devices to a VPN community.

VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.

VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

 Loading...

14. What will happen if FortiAnalyzer features are enabled on FortiManager?

FortiManager will reboot

FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager

FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices

FortiManager can be used only as a logging device.

 Loading...

15. View the following exhibit.





Which of the following statements are true based on this configuration setting? (Choose two.)

This setting will enable the ADOMs feature on FortiManager.

This setting is applied globally to all ADOMs.

This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.

This setting will allow automatic updates to the policy package configuration for a managed device.

 Loading...

16. An administrator’s PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.

How can the administrator unlock the ADOM?

Restore the configuration from a previous backup.

Log in as Super_User in order to unlock the ADO

Log in using the same administrator account to unlock the ADO

Delete the previous admin session manually through the FortiManager GUI or CL

 Loading...

17. Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

Managed gateways are devices managed by FortiManager in the same ADOM

External gateways are third-party VPN gateway devices only

Protected subnets are the subnets behind the device that you don’t want to allow access to over the IPsec VPN

Managed devices in other ADOMs must be treated as external gateways

 Loading...

18. View the following exhibit.





An administrator is importing a new device to FortiManager and has selected the shown options.

What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

The unused objects that are not tied to the firewall policies will be installed on FortiGate

The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate

The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database

 Loading...

19. Refer to the exhibit.





Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?

FortiManager ignored the firewall service category General but created a new service category in its database.

FortiManager ignored the firewall service category general and deleted the duplicate value In Its database

FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.

FortiManager ignored the firewall service category General and did not update Its database with the value

 Loading...

20. Which configuration setting for FortiGate is part of a device-level database on FortiManager?

VIP and IP Pools

Firewall policies

Security profiles

Routing

 Loading...

Page 3 of 3

21. Refer to the exhibit.





Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

It allows two or more administrators to make configuration changes at the same time, in the same ADO

It disables concurrent read-write access to an ADO

It allows the same administrator to lock more than one ADOM at the same time.

It is used to validate administrator login attempts through external servers.

 Loading...

22. View the following exhibit.





If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.

During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

 Loading...

23. View the following exhibit:





Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI) option? (Choose two.)

You must install these changes using Install Wizard

FortiGate will auto-update the FortiManager’s device-level database.

FortiManager will create a new revision history.

FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

 Loading...

24. Refer to the exhibit.





You are using the Quick Install option to install configuration changes on the managed FortiGate.

Which two statements correctly describe the result? (Choose two.)

It will not create a new revision in the revision history

It installs device-level changes to FortiGate without launching the Install Wizard

It cannot be canceled once initiated and changes will be installed on the managed device

It provides the option to preview configuration changes prior to installing them

 Loading...

 Loading...