NSE5_FMG-7.2 Online Practice Questions and Answers

Refer to the exhibits. Exhibit one.

Exhibit two.

An administrator created a new system template namedTrainingwith two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed.

What can be the main reason for these unset commands?

A. The DNS addresses in the default system settings are the same as theTrainingsystem template

B. TheTrainingsystem template has other default settings

C. The ADOM is locked by another administrator

D. TheTrainingsystem template does not have assigned devices

View the following exhibit.

If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

A. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

B. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.

C. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

D. If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

View the following exhibit.

What is the purpose of settingADOM ModetoAdvanced?

A. The setting allows automatic updates to the policy package configuration for a managed device

B. The setting enables the ADOMs feature on FortiManager

C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.

D. The setting disables concurrent ADOM access and adds ADOM locking

An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

A. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package

B. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.

C. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

Refer to the exhibit.

Which two statements about the output are true? (Choose two.)

A. The latest revision history for the managed FortiGate does match with the FortiGate running configuration

B. Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed

C. The latest history for the managed FortiGate does not match with the device-level database

D. Configuration changes directly made on the FortiGate have been automatically updated to device-level database

What does a policy package status ofConflictindicate?

A. The policy package reports inconsistencies and conflicts during aPolicy Consistency Check.

B. The policy package does not have a FortiGate as the installation target.

C. The policy package configuration has been changed on both FortiManager and the managed device independently.

D. The policy configuration has never been imported after a device was registered on FortiManager.

What will happen if FortiAnalyzer features are enabled on FortiManager?

A. FortiManager will keep all the logs and reports on the FortiManager.

B. FortiManager will enable ADOMs to collect logs automatically from non-FortiGate devices.

C. FortiManager will install the logging configuration to the managed devices

D. FortiManager can be used only as a logging device.

In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric. Given the administrator's actions, which statement correctly describes the expected result?

A. The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.

B. The authorized FortiGate will be automatically added to the Training ADOM.

C. The authorized FortiGate will appear in the root ADOM.

D. The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors.

Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

A. To push these changes to a managed device, it required an install operation to the managed FortiGate.

B. Reverting to a previous revision history will generate a new versionIDand remove all other history versions.

C. Reverting to a previous revision history will tag the device settings status asAuto-Update.

D. It will modify device-level database

Refer to the exhibit.

Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?

A. FortiManager ignored the firewall service category General but created a new service category in its database.

B. FortiManager ignored the firewall service category general and deleted the duplicate value In Its database

C. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.

D. FortiManager ignored the firewall service category General and did not update Its database with the value