Fortinet NSE5_FMG-7.2 Exam Practice Test Instant Access

Question 1

View the following exhibit:

An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager. What name will be used to display the firewall policy for port1?

Aport1 on FortiGate and WAN on FortiManager

Bport1 on both FortiGate and FortiManager

CWAN zone on FortiGate and WAN zone on FortiManager

DWAN zone on FortiGate and WAN interface on FortiManager

Answer : A

Question 2

View the following exhibit.

Which of the following statements are true based on this configuration setting? (Choose two.)

AThis setting will enable the ADOMs feature on FortiManager.

BThis setting is applied globally to all ADOMs.

CThis setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.

DThis setting will allow automatic updates to the policy package configuration for a managed device.

Answer : B, C

Question 3

An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?

AAuthorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.

BChanges to the AP's state must be performed directly on the managed FortiGate.

CAuthorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.

DAuthorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

Answer : D

Question 4

Which of the following statements are true regarding VPN Manager? (Choose three.)

AVPN Manager must be enabled on a per ADOM basis.

BVPN Manager automatically adds newly-registered devices to a VPN community.

CVPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

DCommon IPsec settings need to be configured only once in a VPN Community for all managed gateways.

EVPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

Answer : A, C, D

Question 5

View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A10.0.1.0/24

BIt will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

C192.168.0.1/24

DLocal-FortiGate will automatically choose an IP Network based on its network interface settings.

Answer : A

Question 6

View the following exhibit.

When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

AOnce initiated, the install process cannot be canceled and changes will be installed on the managed device

BWill not create new revision in the revision history

CInstalls device-level changes to FortiGate without launching the Install Wizard

DProvides the option to preview configuration changes prior to installing them

Answer : A, C

Question 7

What does a policy package status of Modified indicate?

AFortiManager is unable to determine the policy package status

BThe policy package was never imported after a device was registered on FortiManager

CThe Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager

DThe Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

Answer : B

Fortinet NSE5_FMG-7.2 Fortinet NSE 5 - FortiManager 7.2 Exam Practice Test