Fortinet NSE5_FMG-7.2 Exam Questions Instant Access

Question 1

Which two settings must be configured for SD-WAN Central Management? (Choose two.)

ASD-WAN must be enabled on per-ADOM basis

BYou can create multiple SD-WAN interfaces per VDOM

CWhen you configure an SD-WAN, you must specify at least two member interfaces.

DThe first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

Answer : A, C

Question 2

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package Fortinet in the custom ADOM1. What will happen to the Fortinet policy package when it is created?

AYou need to assign the global policy package from the global ADOM

BYou need to reapply the global poky package to the ADOM

Cit automatically assigns the global policies

DYou can select the option to assign the global polices

Answer : C

When a new policy package is created in a custom ADOM (Administrative Domain) that already has a global policy package assigned to it, FortiManager automatically applies the global policies to the newly created policy package. This means that the global header and footer policies, which are part of the global policy package assigned to the ADOM, will be automatically included in the new policy package. This helps ensure consistency in policy enforcement across all policy packages within the ADOM and simplifies the management of common policies across different devices or sites managed within the same ADOM.

Question 3

Which two statements about the scheduled backup of FortiManager are true? (Choose two.)

AIt does not back up firmware images saved on FortiManager.

BIt can be configured using the CLI and GUI.

CIt backs up all devices and the FortiGuard database.

DIt supports FTP, SCP, and SFTP.

Answer : A, D

Question 4

In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

AThe FortiGate will be added automatically to the default ADOM named FortiGate.

BThe FortiGate will be automatically added to the Training ADOM.

CBy default, the unregistered FortiGate will appear in the root ADOM.

DThe FortiManager administrator must add the unregistered device manually to the unregistered device
manually to the Training ADOM using the Add Device wizard

Answer : C

Question 5

Refer to the exhibit.

An administrator wants to create a policy on the Staging ADOM in backup mode, and install it on the FortiGate device in the same ADOM.

How can the administrator perform this task?

AThe administrator must use the Policy & Objects section to create a policy first.

BThe administrator must use the FortiManager script.

CThe administrator must disable the FortiManager offline mode first.

DThe administrator must change the ADOM mode to Advanced to bring the FortiManager online.

Answer : B

https://training.fortinet.com/pluginfile.php/1793163/mod_resource/content/26/FortiManager_7.2_Study_Guide-Online.pdf?forcedownload=1

Question 6

Refer to the exhibit.

An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.

When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A192.168.0.1/24

B10.200.1.0/24

CIt will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.

DLocal-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

Answer : A

Question 7

An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.

Which troubleshooting step should you take to resolve the issue?

AMake sure FortiManager Access is enabled in the administrator profile

BMake sure Offline Mode is disabled

CMake sure the administrator IP address is part of the trusted hosts.

DMake sure ADOMs are enabled and the administrator has access to the Global ADOM

Answer : C

Even if a user entered the correct userid/password, the FMG denies access if a user is logging in from an untrusted source IP subnets.

Fortinet NSE 5 - FortiManager 7.2 NSE5_FMG-7.2 Exam Questions