Fortinet NSE5_FMG-7.2 Exam Practice Test Instant Access

Question 1

An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.

Which troubleshooting step should you take to resolve the issue?

AMake sure FortiManager Access is enabled in the administrator profile

BMake sure Offline Mode is disabled

CMake sure the administrator IP address is part of the trusted hosts.

DMake sure ADOMs are enabled and the administrator has access to the Global ADOM

Answer : C

Even if a user entered the correct userid/password, the FMG denies access if a user is logging in from an untrusted source IP subnets.

Question 2

In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

AThe FortiGate will be added automatically to the default ADOM named FortiGate.

BThe FortiGate will be automatically added to the Training ADOM.

CBy default, the unregistered FortiGate will appear in the root ADOM.

DThe FortiManager administrator must add the unregistered device manually to the unregistered device
manually to the Training ADOM using the Add Device wizard

Answer : C

Question 3

View the following exhibit:

How will FortiManager try to get updates for antivirus and IPS?

AFrom the list of configured override servers with ability to fall back to public FDN servers

BFrom the configured override server list only

CFrom the default server fdsl.fortinet.com

DFrom public FDNI server with highest index number only

Answer : A

Question 4

An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the

managed FortiGate.

In which database will the configuration be saved?

ADevice-level database

BRevision history database

CADOM-level database

DConfiguration-level database

Answer : C

https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942

Question 5

What does a policy package status of Conflict indicate?

AThe policy package reports inconsistencies and conflicts during a Policy Consistency Check.

BThe policy package does not have a FortiGate as the installation target.

CThe policy package configuration has been changed on both FortiManager and the managed device
independently.

DThe policy configuration has never been imported after a device was registered on FortiManager.

Answer : C

Question 6

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package Fortinet in the custom ADOM1. What will happen to the Fortinet policy package when it is created?

AYou need to assign the global policy package from the global ADOM

BYou need to reapply the global poky package to the ADOM

Cit automatically assigns the global policies

DYou can select the option to assign the global polices

Answer : C

When a new policy package is created in a custom ADOM (Administrative Domain) that already has a global policy package assigned to it, FortiManager automatically applies the global policies to the newly created policy package. This means that the global header and footer policies, which are part of the global policy package assigned to the ADOM, will be automatically included in the new policy package. This helps ensure consistency in policy enforcement across all policy packages within the ADOM and simplifies the management of common policies across different devices or sites managed within the same ADOM.

Question 7

Refer to the exhibit.

An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.

When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A192.168.0.1/24

B10.200.1.0/24

CIt will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.

DLocal-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

Answer : A

Fortinet NSE 5 - FortiManager 7.2 NSE5_FMG-7.2 Exam Practice Test