Fortinet NSE5_FMG-7.2 Exam Practice Test Instant Access

Question 1

Refer to the exhibit showing a Download Import Report.

Why is it failing to import firewall policy ID 1?

APolicy ID 1 is configured from the interface any to port6. FortiManager rejects the request to import this policy because the any interface does not exist on FortiManager.

BThe address object used in policy ID 1 already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.

CPolicy ID 1 does not have the ADOM Interface mapping configured on FortiManager.

DPolicy ID 1 for this managed FortiGate already exists on FortiManager in the policy package named Remote-FortiGate.

Answer : B

Question 2

What is the purpose of the Policy Check feature on FortiManager?

AIt provides recommendations for optimizing policies in a policy package.

BIt provides recommendations to combine similar policy packages within an ADOM into one single policy package.

CIt compares the policy packages with the revision history, and updates policy packages in the ADOM database.

DIt merges and creates dynamic mappings for duplicate objects used in a policy package.

Answer : A

Question 3

Refer to the exhibit.

In the event that the monitored interface for the primary FortiManager device fails, which statement is true about FortiManager HA?

AManually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.

BReboot the failed device to remove its IP from the primary device.

CReconfigure the primary device lo remove the peer IP of the failed device.

DThe FortiManager HAfailover is transparent to administrators and does not require any reconfiguration.

Answer : D

Question 4

Refer to the exhibit.

How will FortiManager try to get updates for antivirus and IPS?

AFrom the list of configured override servers or public FDN servers

BFrom the default server fds1.fortinet.com

CFrom the configured override server IP address 10.0.1.50 only

DFrom public FDNI server IP address with the fourth highest octet only

Answer : A

Question 5

An administrator is replacing a failed device on FortiManager by running the following command:

execute device replace sn .

Which device name and serial number must the administrator use?

AThe device name of the new device and serial number of the failed device

BThe device name and serial number of the failed device

CThe device name of the failed device and serial number of the new device

DThe device name and serial number of the new device

Answer : C

Question 6

An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?

AAuthorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.

BChanges to the AP's state must be performed directly on the managed FortiGate.

CAuthorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.

DAuthorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

Answer : D

Question 7

Which of the following statements are true regarding VPN Manager? (Choose three.)

AVPN Manager must be enabled on a per ADOM basis.

BVPN Manager automatically adds newly-registered devices to a VPN community.

CVPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

DCommon IPsec settings need to be configured only once in a VPN Community for all managed gateways.

EVPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

Answer : A, C, D

Fortinet NSE5_FMG-7.2 Fortinet NSE 5 - FortiManager 7.2 Exam Practice Test