Fortinet NSE5_FMG-7.2 Exam Practice Test Instant Access

Question 1

An administrator created a header and footer global policy package and assigned it to an ADOM.

What are two outcomes from this action? (Choose two.)

AYou must manually move the header and footer policies after the policy assignment.

BAfter you assign the global policy package to an ADOM, the policy package is hidden from the ADOM and cannot be viewed.

CIf you assign an additional global policy package to the same ADOM, FortiManaqer removes previously assigned policies.

DYou can edit or delete all the global objects in the global ADOM.

Answer : C, D

C = Assigning an additional global policy package to the same individual ADOM policy package removes previously assigned policies. D = After you assign the global ADOM objects, they appear on the Policy & Objects pane for that ADOM. All global objects start with 'g' and are edited or deleted in the global ADOM only. Reference [Page 259] - https://ebin.pub/fortinet-fortimanager-study-guide-for-fortimanager-72.html

Question 2

What does the diagnose dvm check-integrity command do? (Choose two.)

AInternally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM
syntax

BVerifies and corrects unregistered, registered, and deleted device states

CVerifies and corrects database schemas in all object tables

DVerifies and corrects duplicate VDOM entries

Answer : B, D

6.2 Study Guide page 305 verify and correct parts of the device manager databases, including: -- inconsistent device-to-group and group-to-ADOM memberships -- unregistered, registered, and deleted device states -- device lock statuses -- duplicate VDOM entries

Question 3

Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

AThe Security Fabric license, group name and password are required for the FortiManager Security Fabric
integration

BThe Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices

CThe Security Fabric settings are part of the device level settings

DThe Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices

Answer : C, D

Question 4

In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

AThe FortiGate will be added automatically to the default ADOM named FortiGate.

BThe FortiGate will be automatically added to the Training ADOM.

CBy default, the unregistered FortiGate will appear in the root ADOM.

DThe FortiManager administrator must add the unregistered device manually to the unregistered device
manually to the Training ADOM using the Add Device wizard

Answer : C

Question 5

An administrator would like to review, approve, or reject all the firewall policy changes made by the junior

administrators.

How should the Workspace mode be configured on FortiManager?

ASet to workflow and use the ADOM locking feature

BSet to read/write and use the policy locking feature

CSet to normal and use the policy locking feature

DSet to disable and use the policy locking feature

Answer : A

Question 6

Refer to the exhibit.

An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.

Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

AThe administrator logged in using the unsecure protocol HTTP, so the view is restricted.

BThe administrator profile does not have full access privileges like the Super_User profile.

CThe administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.

DFortiAnalyzer features are not enabled on FortiManager.

Answer : B, D

Question 7

Refer to the exhibit.

You are using the Quick Install option to install configuration changes on the managed FortiGate.

Which two statements correctly describe the result? (Choose two.)

AIt will not create a new revision in the revision history

BIt installs device-level changes to FortiGate without launching the Install Wizard

CIt cannot be canceled once initiated and changes will be installed on the managed device

DIt provides the option to preview configuration changes prior to installing them

Answer : C

FortiManager_6.4_Study_Guide-Online -- page 164

The Install Config option allows you to perform a quick installation of device-level settings without launching the Install Wizard. When you use this option, you cannot preview the changes prior to committing. Administrator should be certain of the changes before using this install option, because the install can't be cancelled after the process is initiated.

Fortinet NSE5_FMG-7.2 Fortinet NSE 5 - FortiManager 7.2 Exam Practice Test