Get Real NSE5_FMG-7.2 Quesions Pass Fortinet Certification Exams Easily
NSE5_FMG-7.2 Dumps are Available for Instant Access
NEW QUESTION # 11
Which three settings are the factory default settings on FortiManager? (Choose three.)
- A. FortiAnalyzer features are disabled
- B. Password is fortinet
- C. port1 interface IP address is 192.168.1.99/24
- D. Username is admin
- E. Reports and Event Monitor panes are enabled
Answer: A,C,D
NEW QUESTION # 12
View the following exhibit.
An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?
- A. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
- B. 10.0.1.0/24
- C. 192.168.0.1/24
- D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.
Answer: B
NEW QUESTION # 13
Refer to the exhibit.
A junior administrator is troubleshooting a FortiManager connectivity issue that rs occurring with managed FortiGate devices Given the FortiManager device manager settings shown in the exhibit what can you conclude from the exhibit?
- A. The administrator must refresh both devices to restore connectivity
- B. FortiManager test internet connectivity therefore, both devices appear to be down
- C. The administrator had restored the FortiManager configuration file
- D. The administrator can reclaim the FGFM tunnel to get both devices online
Answer: D
NEW QUESTION # 14
Refer to the exhibit.
You are using theQuick Installoption to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)
- A. It provides the option to preview configuration changes prior to installing them
- B. It installs device-level changes to FortiGate without launching theInstall Wizard
- C. It cannot be canceled once initiated and changes will be installed on the managed device
- D. It will not create a new revision in the revision history
Answer: B,C
Explanation:
FortiManager_6.4_Study_Guide-Online - page 164
The Install Config option allows you to perform a quick installation of device-level settings without launching the Install Wizard. When you use this option, you cannot preview the changes prior to committing.
Administrator should be certain of the changes before using this install option, because the install can't be cancelled after the process is initiated.
NEW QUESTION # 15
Refer to the exhibit.
An administrator is about to add the FortiGate device to FortiManager using the discovery process FortiManager is operating behind a NAT device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings What is the expected result?
- A. During discovery FortiManager uses only the FortiGate serial number to establish the connection
- B. During discovery FortiManager sets trie FortiManager NATed IP address on FortiGate
- C. During discovery FortiManager sets the NATed device IP address on FortiGate
- D. During discovery FortiManager sets both tie FortiManager NATed IP address and NAT device IP address on FortiGate
Answer: C
NEW QUESTION # 16
What is the purpose of the Policy Check feature on FortiManager?
- A. It merges and creates dynamic mappings for duplicate objects used in a policy package.
- B. It provides recommendations for optimizing policies in a policy package.
- C. It provides recommendations to combine similar policy packages within an ADOM into one single policy package.
- D. It compares the policy packages with the revision history, and updates policy packages in the ADOM database.
Answer: B
NEW QUESTION # 17
An administrator's PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.
How can the administrator unlock the ADOM?
- A. Restore the configuration from a previous backup.
- B. Log in using the same administrator account to unlock the ADOM.
- C. Delete the previous admin session manually through the FortiManager GUI or CLI.
- D. Log in asSuper_Userin order to unlock the ADOM.
Answer: C
NEW QUESTION # 18
Refer to the exhibit.
An administrator has created a firewall address object,Trainingwhich is used in the Local-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for theTrainingfirewall address object?
- A. 192.168.0.1/24
- B. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.
- C. It will create a firewall address group on Local-FortiGate with192.168.0.1/24and10.0.1.0/24object values.
- D. 10.200.1.0/24
Answer: A
NEW QUESTION # 19
What are two outcomes of ADOM revisions? (Choose two.)
- A. ADOM revisions can create System Checkpoints for the FortiManager configuration
- B. ADOM revisions can save the current size of the whole ADOM
- C. ADOM revisions can significantly increase the size of the configuration backups.
- D. ADOM revisions can save the current state of all policy packages and objects for an ADOM
Answer: C,D
Explanation:
Reference:https://docs2.fortinet.com/document/fortimanager/6.0.0/best-practices/101837/adom-revisions
NEW QUESTION # 20
What does thediagnose dvm check-integritycommand do? (Choose two.)
- A. Verifies and corrects unregistered, registered, and deleted device states
- B. Verifies and corrects database schemas in all object tables
- C. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax
- D. Verifies and corrects duplicate VDOM entries
Answer: A,D
Explanation:
6.2 Study Guide page 305verify and correct parts of the device manager databases, including:- inconsistent device-to-group and group-to-ADOM memberships- unregistered, registered, and deleted device states- device lock statuses- duplicate VDOM entries
NEW QUESTION # 21
Refer to the exhibit.
Which statement about the object named ALL is true?
- A. FortiManager installed the object ALL with the updated value.
- B. FortiManager updated the object ALL using the FortiManager value in its database.
- C. FortiManager updated the object ALL using the FortiGate value in its database.
- D. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.
Answer: C
NEW QUESTION # 22
An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?
- A. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy
- B. FortiManager will not allow the administrator to delete a referenced address object
- C. FortiManager will replace the deleted address object with all address object in the referenced firewall policy
- D. FortiManager will disable the status of the referenced firewall policy
Answer: A
NEW QUESTION # 23
An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the Workspace mode be configured on FortiManager?
- A. Set to read/write and use the policy locking feature
- B. Set to workflow and use the ADOM locking feature
- C. Set to disable and use the policy locking feature
- D. Set to normal and use the policy locking feature
Answer: B
Explanation:
Reference:https://help.fortinet.com/fmgr/50hlp/52/5-2-0/FMG_520_Online_Help/200_What's-New.03.03.html
NEW QUESTION # 24
An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?
- A. FortiManager will replace the deleted address object withalladdress object in the referenced firewall policy
- B. FortiManager will replace the deleted address object with thenoneaddress object in the referenced firewall policy
- C. FortiManager will not allow the administrator to delete a referenced address object
- D. FortiManager will disable the status of the referenced firewall policy
Answer: B
Explanation:
Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20O
NEW QUESTION # 25
What will happen if FortiAnalyzer features are enabled on FortiManager?
- A. FortiManager can be used only as a logging device.
- B. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager
- C. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices
- D. FortiManager will reboot
Answer: D
Explanation:
Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1800_FAZ%20Features/0
NEW QUESTION # 26
What is the advantage of using FortiManager to manage PortiAnalyzer?
- A. It allows FortiManager to fun reports based on FortiAnalyzer
- B. It allows FortiManager to store all managed FortiGate device logs
- C. It allows FortiManager to act as a collector and FortiAnalyzer device
- D. It allows FortiManager to manage all FortiGate devices
Answer: C
NEW QUESTION # 27
An administrator, Trainer, who is assigned theSuper_Userprofile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.
What can prevent an admin account that hasSuper_Userrights over the device from approving a workflow session?
- A. Trainer must close Student's workflow session before approving the request
- B. Student, who submitted the workflow session, must first self-approve the request
- C. Trainer is not a part of workflow approval group
- D. Trainer does not have full rights over this ADOM
Answer: C
Explanation:
Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/0800_ADOMs/1800_Workflow/0600_Work
NEW QUESTION # 28
Refer to the exhibit.
An administrator wants to create a policy on the Staging ADOM in backup mode, and install it on the FortiGate device in the same ADOM.
How can the administrator perform this task?
- A. The administrator must use the Policy & Objects section to create a policy first.
- B. The administrator must disable the FortiManager offline mode first.
- C. The administrator must change the ADOM mode to Advanced to bring the FortiManager online.
- D. The administrator must use the I ortiManager script.
Answer: C
NEW QUESTION # 29
Refer to the exhibit.
According to the error message why is FortiManager failing to add the FortiAnalyzer device?
- A. The administrator must select the Forti-Manager administrative access checkbox on the FortiAnalyzer management interface
- B. The administrator must turn off the Use Legacy Device login and add the FortiAnalyzer device to the same network as Forti-Manager
- C. The administrator must use the Add Model Device section and discover the FortiAnalyzer device
- D. The administrator must use the correct user name and password of the FortiAnalyzer device
Answer: B
NEW QUESTION # 30
View the following exhibit.
An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?
- A. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
- B. 10.0.1.0/24
- C. 192.168.0.1/24
- D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.
Answer: B
NEW QUESTION # 31
What will happen if FortiAnalyzer features are enabled on FortiManager?
- A. FortiManager can be used only as a logging device.
- B. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager
- C. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices
- D. FortiManager will reboot
Answer: D
NEW QUESTION # 32
An administrator has added all the devices in a Security Fabric group to FortiManager.
How does the administrator identify the root FortiGate?
- A. By a dollar symbol ($) at the end of the device name
- B. By an Asterisk (*) at the end of the device name
- C. Question mark(?) at the end of the device name
- D. By an at symbol (@) at the end of the device name
Answer: B
NEW QUESTION # 33
View the following exhibit.
If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)
- A. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
- B. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
- C. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.
- D. If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
Answer: A,B
Explanation:
Fortimanager can discover FortiGate through a NATed FortiGate IP address. If a FortiManager NATed IP address is configured on FortiGate, then FortiGate can announce itself to FortiManager. FortiManager will not attempt to re-establish the FGFM tunnel to the FortiGate NATed IP address, if the FGFM tunnel is interrupted.
Just like it was in the NATed FortiManager scenario, the FortiManager NATed IP address in this scenario is not configured under FortiGate central management configuration.
NEW QUESTION # 34
Refer to the exhibit.
Given the configuration shown in the exhibit, which two statements are true? (Choose two.)
- A. An administrator can also lock the Local-FortiGate-1 policy package.
- B. The FortiManager ADOM workspace mode is set to Normal.
- C. The FortiManager ADOM is locked by the administrator.
- D. FortiManager is in workflow mode.
Answer: A,C
NEW QUESTION # 35
......
Get Instant Access REAL NSE5_FMG-7.2 DUMP Pass Your Exam Easily: https://www.realexamfree.com/NSE5_FMG-7.2-real-exam-dumps.html
Practice with these NSE5_FMG-7.2 dumps Certification Sample Questions: https://drive.google.com/open?id=1esoFYbOEsDUjSQowEEMqsIRtbP4gvl2R
