Verified NSE5_FMG-7.2 Q&As - Pass Guarantee NSE5_FMG-7.2 Exam Dumps [Q11-Q32]

Rate this post

Verified NSE5_FMG-7.2 Q&As – Pass Guarantee NSE5_FMG-7.2 Exam Dumps

Check the Free demo of our NSE5_FMG-7.2 Exam Dumps with 100 Questions

Fortinet NSE5_FMG-7.2 is a certification exam designed for network security professionals who want to demonstrate their expertise in managing networks through the Fortinet Security Fabric using FortiManager 7.2. Fortinet NSE 5 – FortiManager 7.2 certification validates the skills and knowledge required to configure, manage, and maintain FortiManager, a central management solution that provides a unified console for managing multiple Fortinet devices.

Fortinet NSE5_FMG-7.2 Certification Exam is designed for professionals who are looking to validate their knowledge and skills in managing and administrating Fortinet FortiManager 7.2 systems. Fortinet NSE 5 – FortiManager 7.2 certification exam is intended for network administrators, security administrators, and network engineers who have experience in implementing and managing Fortinet security solutions.

NO.11 Refer to the exhibit.

An administrator would like to create three ADOMs on FortiManager with different access levels based on departments.
What two conclusions can you draw from the design shown in the exhibit? (Choose two.)

Admin A can access VDOM2 and VDOM3 with the super user profile.

The FortiManager policies and objects database can be shared between the Financial and HR ADOMs.

The administrator must set the FortiManager ADOM mode to Advanced.

The administrator must configure FortiManager in workspace mode.

NO.12 View the following exhibit.

An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

The unused objects that are not tied to the firewall policies will be installed on FortiGate

The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate

The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

The unused objects that are not tied to the firewall policies in policy package will be deleted from the

NO.13 An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package,Fortinet, in the custom ADOM1.
Which statement about the global policy package assignment to the newly-created policy packageFortinetis true?

When a new policy package is created, it automatically assigns the global policies to the new package.

When a new policy package is created, you need to assign the global policy package from the global ADOM.

When a new policy package is created, you need to reapply the global policy package to the ADOM.

When a new policy package is created, you can select the option to assign the global policies to the new package.

NO.14 Refer to the exhibit.

Which two statements about the output are true? (Choose two.)

The latest revision history for the managed FortiGate does match with the FortiGate running configuration

Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed

The latest history for the managed FortiGate does not match with the device-level database

Configuration changes directly made on the FortiGate have been automatically updated to device-level

NO.15 View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

FortiManager updated the object ALL using FortiGate’s value in its database

FortiManager updated the object ALL using FortiManager’s value in its database

FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

FortiManager installed the object ALL with the updated value.

NO.16 View the following exhibit:

Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI) option? (Choose two.)

You must install these changes using Install Wizard

FortiGate will auto-update the FortiManager’s device-level database.

FortiManager will create a new revision history.

FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

NO.17 What will happen if FortiAnalyzer features are enabled on FortiManager?

FortiManager will reboot

FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager

FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices

FortiManager can be used only as a logging device.

NO.18 An administrator would like to create an SD-WAN using central management in theTrainingADOM.
To create an SD-WAN using central management, which two steps must be completed? (Choose two.)

Specify a gateway address when you create a default SD-WAN static route

Enable SD-WAN central management in theTrainingADOM

Configure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN template settings

Remove all the interface references such as routes or policies that will be a part of SD-WAN member interfaces

NO.19 What will be the result of reverting to a previous revision version in the revision history?

It will install configuration changes to managed device automatically

It will tag the device settings status asAuto-Update

It will generate a new versionIDand remove all other revision history versions

It will modify the device-level database

NO.20 Refer to the exhibit.

According to the error message why is FortiManager failing to add the FortiAnalyzer device?

The administrator must turn off the Use Legacy Device login and add the FortiAnalyzer device to the same network as Forti-Manager

The administrator must select the Forti-Manager administrative access checkbox on the FortiAnalyzer management interface

The administrator must use the Add Model Device section and discover the FortiAnalyzer device

The administrator must use the correct user name and password of the FortiAnalyzer device

NO.21 View the following exhibit.

When usingInstall Configoption to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

Once initiated, the install process cannot be canceled and changes will be installed on the managed device

Will not create new revision in the revision history

Installs device-level changes to FortiGate without launching theInstall Wizard

Provides the option to preview configuration changes prior to installing them

NO.22 An administrator is in the process of moving the system template profile between ADOMs by running the following command:
execute improfile import-profile ADOM2 3547 /tmp/myfile
Where does the administrator import the file from?

File system

ADOM1

ADOM2 object database

ADOM2

NO.23 View the following exhibit.

Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install Oncolumn?

The Install On column value represents successful installation on the managed devices

Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

Policy seq#3 will be installed on the Trainer[NAT] VDOM only

Policy seq#3 will be not installed on any managed device

NO.24 What does a policy package status ofConflictindicate?

The policy package reports inconsistencies and conflicts during aPolicy Consistency Check.

The policy package does not have a FortiGate as the installation target.

The policy package configuration has been changed on both FortiManager and the managed device independently.

The policy configuration has never been imported after a device was registered on FortiManager.

NO.25 Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

The FortiManager ADOM workspace mode is set to Normal.

An administrator can also lock the Local-FortiGate-1 policy package.

The FortiManager ADOM is locked by the administrator.

FortiManager is in workflow mode.

NO.26 Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

To push these changes to a managed device, it required an install operation to the managed FortiGate.

Reverting to a previous revision history will generate a new version ID and remove all other history

Reverting to a previous revision history will tag the device settings status as Auto-Update.

It will modify device-level database

NO.27 What is the purpose of the Policy Check feature on FortiManager?

It provides recommendations for optimizing policies in a policy package.

It provides recommendations to combine similar policy packages within an ADOM into one single policy package.

It compares the policy packages with the revision history, and updates policy packages in the ADOM database.

It merges and creates dynamic mappings for duplicate objects used in a policy package.

NO.28 Refer to the exhibit.

Which two statements about the output are true? (Choose two.)

The latest revision history for the managed FortiGate does match with the FortiGate running configuration

Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed

The latest history for the managed FortiGate does not match with the device-level database

Configuration changes directly made on the FortiGate have been automatically updated to device-level database

NO.29 View the following exhibit.

Which statement is true regarding this failed installation log?

Policy ID 2 is installed without a source address

Policy ID 2 will not be installed

Policy ID 2 is installed in disabled state

Policy ID 2 is installed without a source device

NO.30 An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?

First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route

You must specify a gateway address when you create a default static route

Remove all the interface references such as routes or policies

Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.

NO.31 View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

NO.32 An administrator, Trainer, who is assigned theSuper_Userprofile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.
What can prevent an admin account that hasSuper_Userrights over the device from approving a workflow session?