Fortinet NSE5_FMG-7.2 Exam Questions Instant Access

Question 1

An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.

Which interface must the administrator select in the static route device drop-down list?

Aport2

Bvirtual-wan-link

Cport1

Dauto-discovery

Answer : B

Question 2

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.

Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

AWhen a new policy package is created, it automatically assigns the global policies to the new package.

BWhen a new policy package is created, you need to assign the global policy package from the global
ADOM.

CWhen a new policy package is created, you need to reapply the global policy package to the ADOM.

DWhen a new policy package is created, you can select the option to assign the global policies to the new package.

Answer : A

Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).

Question 3

View the following exhibit.

An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

AThe unused objects that are not tied to the firewall policies will be installed on FortiGate

BThe unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate

CThe unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

DThe unused objects that are not tied to the firewall policies in policy package will be deleted from the
FortiManager database

Answer : C

Question 4

Which two statements regarding device management on FortiManager are true? (Choose two.)

AFortiGate devices in HA cluster devices are counted as a single device.

BFortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

CFortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

DThe maximum number of managed devices for each ADOM is 500.

Answer : A, C

Question 5

Which of the following statements are true regarding VPN Manager? (Choose three.)

AVPN Manager must be enabled on a per ADOM basis.

BVPN Manager automatically adds newly-registered devices to a VPN community.

CVPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

DCommon IPsec settings need to be configured only once in a VPN Community for all managed gateways.

EVPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

Answer : A, C, D

Question 6

View the following exhibit:

Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI) option? (Choose two.)

AYou must install these changes using Install Wizard

BFortiGate will auto-update the FortiManager's device-level database.

CFortiManager will create a new revision history.

DFortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

Answer : B, C

Question 7

In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

AThe FortiGate will be added automatically to the default ADOM named FortiGate.

BThe FortiGate will be automatically added to the Training ADOM.

CBy default, the unregistered FortiGate will appear in the root ADOM.

DThe FortiManager administrator must add the unregistered device manually to the unregistered device
manually to the Training ADOM using the Add Device wizard

Answer : C

Fortinet NSE 5 - FortiManager 7.2 NSE5_FMG-7.2 Exam Questions