Fortinet NSE5_FMG-7.2 Exam Questions Instant Access

Question 1

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

ASecondary device with highest priority will automatically be promoted to the primary role, and manually
reconfigure all other secondary devices to point to the new primary device

BReboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

CManually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

DFortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

Answer : C

FortiManager_6.4_Study_Guide-Online -- page 346

FortiManager HA doesn't support IP takeover where an HA state transition is transparent to administrators. If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:

1. Manually reconfigure one of the secondary devices to become the primary device

2. Reconfigure all other secondary devices to point to the new primary device

Question 2

View the following exhibit.

When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

AOnce initiated, the install process cannot be canceled and changes will be installed on the managed device

BWill not create new revision in the revision history

CInstalls device-level changes to FortiGate without launching the Install Wizard

DProvides the option to preview configuration changes prior to installing them

Answer : A, C

Question 3

View the following exhibit.

If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

AFortiGate is discovered by FortiManager through the FortiGate NATed IP address.

BFortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on
FortiGate under central management.

CDuring discovery, the FortiManager NATed IP address is not set by default on FortiGate.

DIf the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

Answer : A, C

Fortimanager can discover FortiGate through a NATed FortiGate IP address. If a FortiManager NATed IP address is configured on FortiGate, then FortiGate can announce itself to FortiManager. FortiManager will not attempt to re-establish the FGFM tunnel to the FortiGate NATed IP address, if the FGFM tunnel is interrupted. Just like it was in the NATed FortiManager scenario, the FortiManager NATed IP address in this scenario is not configured under FortiGate central management configuration.

Question 4

An administrator's PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.

How can the administrator unlock the ADOM?

ARestore the configuration from a previous backup.

BLog in as Super_User in order to unlock the ADOM.

CLog in using the same administrator account to unlock the ADOM.

DDelete the previous admin session manually through the FortiManager GUI or CLI.

Answer : D

Question 5

View the following exhibit:

How will FortiManager try to get updates for antivirus and IPS?

AFrom the list of configured override servers with ability to fall back to public FDN servers

BFrom the configured override server list only

CFrom the default server fdsl.fortinet.com

DFrom public FDNI server with highest index number only

Answer : A

Question 6

An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

AWhen creating a new policy package, the administrator can select the option to assign the global policy
package to the new policy package

BWhen a new policy package is created, the administrator needs to reapply the global policy package to
ADOM1.

CWhen a new policy package is created, the administrator must assign the global policy package from the global ADOM.

DWhen the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

Answer : A

Question 7

View the following exhibit.

Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?

APolicy 3 will be installed on all FortiGate devices and vdom belongs to the ADOM.

BPolicy seq.# 3 will be skipped because no installation targets are specified.

CPolicy seq.# 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets.

DPolicy seq.# 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target.

EPolicy seq # 1 will be installed on the Remote-FortiGate root[NAT] and Student[NAT] VDOMs only.

Answer : C, E

Fortinet NSE 5 - FortiManager 7.2 NSE5_FMG-7.2 Exam Questions