Fortinet NSE5_FMG-7.2 Exam Questions Instant Access

Question 1

An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.

Which interface must the administrator select in the static route device drop-down list?

Aport2

Bvirtual-wan-link

Cport1

Dauto-discovery

Answer : B

Question 2

View the following exhibit.

An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

AThe unused objects that are not tied to the firewall policies will be installed on FortiGate

BThe unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate

CThe unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

DThe unused objects that are not tied to the firewall policies in policy package will be deleted from the
FortiManager database

Answer : C

Question 3

An administrator is replacing a device on FortiManager by running the following command:

execute device replace sn .

What device name and serial number must the administrator use?

ADevice name and serial number of the original device.

BDevice name and serial number of the replacement device.

CDevice name of the replacement device and serial number of the original device.

DDevice name of the original device and serial number of the replacement device.

Answer : D

Question 4

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

ASecondary device with highest priority will automatically be promoted to the primary role, and manually
reconfigure all other secondary devices to point to the new primary device

BReboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

CManually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

DFortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

Answer : C

FortiManager_6.4_Study_Guide-Online -- page 346

FortiManager HA doesn't support IP takeover where an HA state transition is transparent to administrators. If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:

1. Manually reconfigure one of the secondary devices to become the primary device

2. Reconfigure all other secondary devices to point to the new primary device

Question 5

An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the

managed FortiGate.

In which database will the configuration be saved?

ADevice-level database

BRevision history database

CADOM-level database

DConfiguration-level database

Answer : C

https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942

Question 6

What is the purpose of ADOM revisions?

ATo create System Checkpoints for the FortiManager configuration.

BTo save the current state of the whole ADOM.

CTo save the current state of all policy packages and objects for an ADOM.

DTo revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision

Answer : C

Fortimanager 6.4 Study guide page 198

Question 7

Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

AWhen FortiManager is auto-updated with configuration changes made directly on a managed device

BWhen changes to the device-level database are made on FortiManager

CWhen FortiManager installs device-level changes on a managed device

DWhen a configuration revision is reverted to a previous revision in the revision history

Answer : A, C

Fortinet NSE 5 - FortiManager 7.2 NSE5_FMG-7.2 Exam Questions