Try Free Fortinet NSE 5 - FortiManager 7.0 NSE5_FMG-7.0 Dumps

Try Free Fortinet NSE 5 – FortiManager 7.0 NSE5_FMG-7.0 Dumps

test2022-06-20T05:56:27+00:00

By test Fortinet NSE 5 - FortiManager 7.0, NSE5_FMG-7.0 dumps, NSE5_FMG-7.0 questions and answers 0 Comments

Are you prepared to take the NSE5_FMG-7.0 Fortinet NSE 5 – FortiManager 7.0 exam? FreeTestShare NSE5_FMG-7.0 Dumps will help you better comprehend the information included in the actual exam. Premium NSE5_FMG-7.0 Practice Exam is recommended for testing your knowledge and identifying areas for improvement in a real-world exam setting. Candidates who have taken it have gotten excellent results on the NSE5_FMG-7.0 test. We highly recommend you study NSE5_FMG-7.0 Dumps to ensure your success in Fortinet NSE 5 – FortiManager 7.0 exam.

Here we have some NSE5_FMG-7.0 sample exam questions. Try them to see if you are ready.

Page 1 of 2

1. Refer to the exhibits.

Exhibit one.

Exhibit two.

An administrator created a new system template named Training with two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed.

What can be the main reason for these unset commands?

The DNS addresses in the default system settings are the same as the Training system template

The Training system template has other default settings

The ADOM is locked by another administrator

The Training system template does not have assigned devices

2. Which of the following statements are true regarding VPN Manager? (Choose three.)

VPN Manager must be enabled on a per ADOM basis.

VPN Manager automatically adds newly-registered devices to a VPN community.

VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.

VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

3. View the following exhibit.

What is the purpose of setting ADOM Mode to Advanced?

The setting allows automatic updates to the policy package configuration for a managed device

The setting enables the ADOMs feature on FortiManager

This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.

The setting disables concurrent ADOM access and adds ADOM locking

4. Refer to the exhibit.

Which two statements are true if the script is executed using the Device Database option? (Choose two.)

You must install these changes using the Install Wizard to a managed device

The successful execution of a script on the Device Database will create a new revision history

The script history will show successful installation of the script on the remote FortiGate

The Device Settings Status will be tagged as Modified

5. View the following exhibit.

If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.

During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

6. Refer to the exhibit.

An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.

What is the purpose of this command?

It allows FortiGate to unset central management settings.

It allows FortiGate to reboot and recover the previous configuration from its configuration file.

It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

It allows FortiGate to reboot and restore a previously working firmware image.

7. What does a policy package status of Conflict indicate?

The policy package reports inconsistencies and conflicts during a Policy Consistency Check.

The policy package does not have a FortiGate as the installation target.

The policy package configuration has been changed on both FortiManager and the managed device independently.

The policy configuration has never been imported after a device was registered on FortiManager.

8. View the following exhibit.

Which statement is true regarding this failed installation log?

Policy ID 2 is installed without a source address

Policy ID 2 will not be installed

Policy ID 2 is installed in disabled state

Policy ID 2 is installed without a source device

9. View the following exhibit.

When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

Once initiated, the install process cannot be canceled and changes will be installed on the managed device

Will not create new revision in the revision history

Installs device-level changes to FortiGate without launching the Install Wizard

Provides the option to preview configuration changes prior to installing them

10. Refer to the exhibit.

Which statement about the object named ALL is true?

FortiManager updated the object ALL using the FortiGate value in its database.

FortiManager installed the object ALL with the updated value.

FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

FortiManager updated the object ALL using the FortiManager value in its database.

Page 2 of 2

11. View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

12. Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

To push these changes to a managed device, it required an install operation to the managed FortiGate.

Reverting to a previous revision history will generate a new version ID and remove all other history versions.

Reverting to a previous revision history will tag the device settings status as Auto-Update.

It will modify device-level database

13. Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

It allows two or more administrators to make configuration changes at the same time, in the same ADO

It disables concurrent read-write access to an ADO

It allows the same administrator to lock more than one ADOM at the same time.

It is used to validate administrator login attempts through external servers.

14. An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.

How should the Workspace mode be configured on FortiManager?

Set to workflow and use the ADOM locking feature

Set to read/write and use the policy locking feature

Set to normal and use the policy locking feature

Set to disable and use the policy locking feature

15. When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

FortiManager will revert and install a previous configuration revision on the managed FortiGate.

FortiGate will reject the CLI commands that will cause the tunnel to go down.

FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.

16. View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package.

When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

10.0.1.0/24

It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

192.168.0.1/24

Local-FortiGate will automatically choose an IP Network based on its network interface settings.