Fortinet NSE5_FMG-7.2 Exam Practice Test Instant Access

Question 1

Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

AWhen FortiManager is auto-updated with configuration changes made directly on a managed device

BWhen changes to the device-level database are made on FortiManager

CWhen FortiManager installs device-level changes on a managed device

DWhen a configuration revision is reverted to a previous revision in the revision history

Answer : A, C

Question 2

An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?

AAuthorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.

BChanges to the AP's state must be performed directly on the managed FortiGate.

CAuthorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.

DAuthorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

Answer : D

Question 3

Which of the following statements are true regarding VPN Manager? (Choose three.)

AVPN Manager must be enabled on a per ADOM basis.

BVPN Manager automatically adds newly-registered devices to a VPN community.

CVPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

DCommon IPsec settings need to be configured only once in a VPN Community for all managed gateways.

EVPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

Answer : A, C, D

Question 4

View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A10.0.1.0/24

BIt will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

C192.168.0.1/24

DLocal-FortiGate will automatically choose an IP Network based on its network interface settings.

Answer : C

Question 5

View the following exhibit.

When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

AOnce initiated, the install process cannot be canceled and changes will be installed on the managed device

BWill not create new revision in the revision history

CInstalls device-level changes to FortiGate without launching the Install Wizard

DProvides the option to preview configuration changes prior to installing them

Answer : A, C

Question 6

Refer to the exhibit.

An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.

When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

A192.168.0.1/24

B10.200.1.0/24

CIt will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.

DLocal-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

Answer : A

Question 7

An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the

managed FortiGate.

In which database will the configuration be saved?

ADevice-level database

BRevision history database

CADOM-level database

DConfiguration-level database

Answer : C

https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942

Fortinet NSE5_FMG-7.2 Fortinet NSE 5 - FortiManager 7.2 Exam Practice Test