A Review Of High Quality NSE5_FMG-7.2 Testing Material

NEW QUESTION 1

Refer to the exhibit.

Given the configuration shown in the exhibit, what can you conclude from the installation targets m the Install On column? (Choose two)

• A. Policy seq # 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target
• B. Policy seq # 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets
• C. Policy seq # 1 will be installed on the Remoto-FortiGate root[NAT] and Student[NAT] VDOMs only
• D. Policy 3 will be installed on all FortiGate devices and vdom belongs to the ADOM
• E. Policy seq # 3 will be skipped because no installation targets are specified

Answer: BC

NEW QUESTION 2

Refer to the exhibit.

An administrator has created a firewall address object,Trainingwhich is used in the Local- FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for theTrainingfirewall address object?

• A. 192.168.0.1/24
• B. 10.200.1.0/24
• C. It will create a firewall address group on Local-FortiGate with192.168.0.1/24and10.0.1.0/24object values.
• D. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

Answer: A

NEW QUESTION 3

Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

• A. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration
• B. TheFabric Viewmodule enables you to generate the Security Fabric ratings for Security Fabric devices
• C. The Security Fabric settings are part of the device level settings
• D. TheFabric Viewmodule enables you to view the Security Fabric ratings for Security Fabric devices

Answer: CD

NEW QUESTION 4

What does thediagnose dvm check-integritycommand do? (Choose two.)

• A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOMsyntax
• B. Verifies and corrects unregistered, registered, and deleted device states
• C. Verifies and corrects database schemas in all object tables
• D. Verifies and corrects duplicate VDOM entries

Answer: BD

Explanation:
* 6.2 Study Guide page 305verify and correct parts of the device manager databases, including:– inconsistent device-to-group and group-to-ADOM memberships– unregistered, registered, and deleted device states– device lock statuses– duplicate VDOM entries

NEW QUESTION 5

Refer to the exhibit.

Which statement about the object named ALL is true?

• A. FortiManager updated the object ALL using the FortiGate value in its database.
• B. FortiManager installed the object ALL with the updated value.
• C. FortiManager created the object ALL as a unique entity in its database, which can be only used by thismanaged FortiGate.
• D. FortiManager updated the object ALL using the FortiManager value in its database.

Answer: A

NEW QUESTION 6

Which two settings must be configured for SD-WAN Central Management? (Choose two.)

• A. SD-WAN must be enabled on per-ADOM basis
• B. You can create multiple SD-WAN interfaces per VDOM
• C. When you configure an SD-WAN, you must specify at least two member interfaces.
• D. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

Answer: AC

NEW QUESTION 7

An administrator created a header and footer global policy package and assigned it to an ADOM.
What are two outcomes from this action? (Choose two.)

• A. You must manually move the header and footer policies after the policy assignment.
• B. After you assign the global policy package to an ADOM, the policy package is hiddenfrom the ADOM and cannot be viewed.
• C. If you assign an additional global policy package to the same ADOM, FortiManaqer removes previously assigned policies.
• D. You can edit or delete all the global objects in the global ADOM.

Answer: AD

NEW QUESTION 8

Which two items are included in the FortiManager backup? (Choose two.)

• A. FortiGuard database
• B. Global database
• C. Logs
• D. All devices

Answer: BD

Explanation:
Reference:https://kb.fortinet.com/kb/viewContent.do?externalId=FD34549

NEW QUESTION 9

Refer to the exhibit.

Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?

• A. FortiManager ignored the firewall service category General but created a new service category in its database.
• B. FortiManager ignored the firewall service category general and deleted the duplicate value In Its database
• C. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.
• D. FortiManager ignored the firewall service category General and did not update Its database with the value

Answer: D

NEW QUESTION 10

Refer to the exhibit.

You are using theQuick Installoption to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)

• A. It will not create a new revision in the revision history
• B. It installs device-level changes to FortiGate without launching theInstall Wizard
• C. It cannot be canceled once initiated and changes will be installed on the managed device
• D. It provides the option to preview configuration changes prior to installing them

Answer: BC

Explanation:
FortiManager_6.4_Study_Guide-Online – page 164
The Install Config option allows you to perform a quick installation of device-level settings without launching the Install Wizard. When you use this option, you cannot preview the changes prior to committing. Administrator should be certain of the changes before using this install option, because the install can’t be cancelled after the process is initiated.

NEW QUESTION 11

An administrator, Trainer, who is assigned theSuper_Userprofile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.
What can prevent an admin account that hasSuper_Userrights over the device from approving a workflow session?

• A. Trainer is not a part of workflow approval group
• B. Trainer does not have full rights over this ADOM
• C. Trainer must close Student’s workflow session before approving the request
• D. Student, who submitted the workflow session, must first self-approve the request

Answer: A

Explanation:
Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/0800_ADOMs/1800_Workflow/0600_Workflow%20sessions.htm

NEW QUESTION 12

View the following exhibit.

What is the purpose of settingADOM ModetoAdvanced?

• A. The setting allows automatic updates to the policy package configuration for a managed device
• B. The setting enables the ADOMs feature on FortiManager
• C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.
• D. The setting disables concurrent ADOM access and adds ADOM locking

Answer: C

Explanation:
Reference:https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/66530/adom-device-modes

NEW QUESTION 13

In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric.
Given the administrator's actions, which statement correctly describes the expected result?

• A. The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.
• B. The authorized FortiGate will be automatically added to the Training ADOM.
• C. The authorized FortiGate will appear in the root ADOM.
• D. The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors.

Answer: C

NEW QUESTION 14

What will happen if FortiAnalyzer features are enabled on FortiManager?

• A. FortiManager will reboot
• B. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager
• C. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices
• D. FortiManager can be used only as a logging device.

Answer: A

Explanation:
Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1800_FAZ%20Features/0200_Enable%20FAZ%20Features.htm

NEW QUESTION 15

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package,Fortinet, in the custom ADOM1.
Which statement about the global policy package assignment to the newly-created policy packageFortinetis true?

• A. When a new policy package is created, it automatically assigns the global policies to the new package.
• B. When a new policy package is created, you need to assign the global policy package from the globalADOM.
• C. When a new policy package is created, you need to reapply the global policy package to the ADOM.
• D. When a new policy package is created, you can select the option to assign the global policies to the new package.

Answer: A

Explanation:
Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).

NEW QUESTION 16

View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local- FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

• A. 10.0.1.0/24
• B. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
• C. 192.168.0.1/24
• D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.

Answer: A

NEW QUESTION 17
......