Fortinet NSE5_FMG-7.2 Exam Practice Test Instant Access

Question 1

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.

Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

AWhen a new policy package is created, it automatically assigns the global policies to the new package.

BWhen a new policy package is created, you need to assign the global policy package from the global
ADOM.

CWhen a new policy package is created, you need to reapply the global policy package to the ADOM.

DWhen a new policy package is created, you can select the option to assign the global policies to the new package.

Answer : A

Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).

Question 2

An administrator would like to create an SD-WAN using central management in the Training ADOM.

To create an SD-WAN using central management, which two steps must be completed? (Choose two.)

ASpecify a gateway address when you create a default SD-WAN static route

BEnable SD-WAN central management in the Training ADOM

CConfigure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN
template settings

DRemove all the interface references such as routes or policies that will be a part of SD-WAN member
interfaces

Answer : B, D

Question 3

Push updates are failing on a FortiGate device that is located behind a NAT device Which two settings should the administrator check? (Choose two.)

AThat the virtual IP address and correct ports are set on the NAT device

BThat the NAT device IP address and correct ports are configured on FortiManager

CThat the external IP address on the NAT device is set to DHCP and configured with the virtual IP

DThat the override server IP address is set on FortiManager and the NAT device

Answer : B, C

Question 4

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

ASecondary device with highest priority will automatically be promoted to the primary role, and manually
reconfigure all other secondary devices to point to the new primary device

BReboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

CManually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

DFortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

Answer : C

FortiManager_6.4_Study_Guide-Online -- page 346

FortiManager HA doesn't support IP takeover where an HA state transition is transparent to administrators. If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:

1. Manually reconfigure one of the secondary devices to become the primary device

2. Reconfigure all other secondary devices to point to the new primary device

Question 5

An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.

What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

ATrainer is not a part of workflow approval group

BTrainer does not have full rights over this ADOM

CTrainer must close Student's workflow session before approving the request

DStudent, who submitted the workflow session, must first self-approve the request

Answer : A

Question 6

View the following exhibit:

Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI) option? (Choose two.)

AYou must install these changes using Install Wizard

BFortiGate will auto-update the FortiManager's device-level database.

CFortiManager will create a new revision history.

DFortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

Answer : B, C

Question 7

Which configuration setting for FortiGate is part of a device-level database on FortiManager?

AVIP and IP Pools

BFirewall policies

CSecurity profiles

DRouting

Answer : C

The FortiManager stores the FortiGate configuration details in two distinct databases. The device-level database includes configuration details related to device-level settings, such as interfaces, DNS, routing, and more. The ADOM-level database includes configuration details related to firewall policies, objects, and security profiles.

Fortinet NSE 5 - FortiManager 7.2 NSE5_FMG-7.2 Exam Practice Test