Fortinet NSE5_FMG-7.2 Exam Practice Test Instant Access

Question 1

Push updates are failing on a FortiGate device that is located behind a NAT device Which two settings should the administrator check? (Choose two.)

AThat the virtual IP address and correct ports are set on the NAT device

BThat the NAT device IP address and correct ports are configured on FortiManager

CThat the external IP address on the NAT device is set to DHCP and configured with the virtual IP

DThat the override server IP address is set on FortiManager and the NAT device

Answer : B, C

Question 2

An administrator would like to create an SD-WAN using central management. What steps does the

administrator need to perform to create an SD-WAN using central management?

AFirst create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route

BYou must specify a gateway address when you create a default static route

CRemove all the interface references such as routes or policies

DEnable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.

Answer : D

Question 3

You are moving managed FortiGate devices from one ADOM to a new ADOM.

Which statement correctly describes the expected result?

AAny pending device settings will be installed automatically

BAny unused objects from a previous ADOM are moved to the new ADOM automatically

CThe shared policy package will not be moved to the new ADOM

DPolicy packages will be imported into the new ADOM automaticallyD

Answer : C

Question 4

Refer to the exhibit.

An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.

What is the purpose of this command?

AIt allows FortiGate to unset central management settings.

BIt allows FortiGate to reboot and recover the previous configuration from its configuration file.

CIt allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

DIt allows FortiGate to reboot and restore a previously working firmware image.

Answer : B

Question 5

Which two statements about the scheduled backup of FortiManager are true? (Choose two.)

AIt does not back up firmware images saved on FortiManager.

BIt can be configured using the CLI and GUI.

CIt backs up all devices and the FortiGuard database.

DIt supports FTP, SCP, and SFTP.

Answer : A, D

Question 6

An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.

What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

ATrainer is not a part of workflow approval group

BTrainer does not have full rights over this ADOM

CTrainer must close Student's workflow session before approving the request

DStudent, who submitted the workflow session, must first self-approve the request

Answer : A

Question 7

An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

AWhen creating a new policy package, the administrator can select the option to assign the global policy
package to the new policy package

BWhen a new policy package is created, the administrator needs to reapply the global policy package to
ADOM1.

CWhen a new policy package is created, the administrator must assign the global policy package from the global ADOM.

DWhen the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

Answer : A

Fortinet NSE 5 - FortiManager 7.2 NSE5_FMG-7.2 Exam Practice Test