This page was exported from Top Exam Collection [ http://blog.topexamcollection.com ] Export date:Mon Jan 20 11:56:20 2025 / +0000 GMT ___________________________________________________ Title: Fortinet NSE5_FMG-7.2 Real 2024 Braindumps Mock Exam Dumps [Q26-Q46] --------------------------------------------------- Fortinet NSE5_FMG-7.2 Real 2024 Braindumps Mock Exam Dumps NSE5_FMG-7.2 Exam Questions | Real NSE5_FMG-7.2 Practice Dumps Fortinet NSE5_FMG-7.2 certification exam covers a wide range of topics related to network security, including network optimization, security policies, device inventory, configuration management, logging and reporting, and more. It is a vendor-specific certification that demonstrates an individual's proficiency in using FortiManager to manage and secure network infrastructure. Fortinet NSE5_FMG-7.2 certification exam is designed to test the knowledge and skills of network security professionals in using FortiManager 7.2 to manage and maintain Fortinet security devices. FortiManager is a centralized management platform that allows organizations to deploy and manage multiple Fortinet security devices from a single console, making it an essential tool for network security administrators.   Q26. Which two settings must be configured for SD-WAN Central Management? (Choose two.)  SD-WAN must be enabled on per-ADOM basis  You can create multiple SD-WAN interfaces per VDOM  When you configure an SD-WAN, you must specify at least two member interfaces.  The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies. Q27. Refer to the exhibit.Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)  It supports the FortiManager script feature  It allows making configuration changes for managed devices on FortiManager panes  FortiManager automatically installs the configuration difference in revisions on the managed FortiGate  You cannot assign the same ADOM to multiple administrators “FortiGate units in the ADOM will query their own configuration every 5 seconds. If there has been a configuration change, the FortiGate unit will send a diff revision on the change to the FortiManager using the FGFM protocol.”Q28. What is the purpose of the Policy Check feature on FortiManager?  To find and provide recommendation to combine multiple separate policy packages into one common policy package  To find and merge duplicate policies in the policy package  To find and provide recommendation for optimizing policies in a policy package  To find and delete disabled firewall policies in the policy package Q29. View the following exhibit.Which of the following statements are true based on this configuration setting? (Choose two.)  This setting will enable the ADOMs feature on FortiManager.  This setting is applied globally to all ADOMs.  This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.  This setting will allow automatic updates to the policy package configuration for a managed device. Q30. An administrator is replacing a failed device on FortiManager by running the following command:execute device replace sn <devname> <serialnum>.Which device name and serial number must the administrator use?  The device name of the new device and serial number of the failed device  The device name and serial number of the failed device  The device name of the failed device and serial number of the new device  The device name and serial number of the new device Q31. Refer to the exhibit.You ate using the Quick install option to install configuration changes on the managed FortiGate Which two statements correctly describe the result? (Choose two)  It installs device-level changes on the FortiGate device without launching the Install Wizard  It installs all the changes in the device database first and the administrator must reinstall the changes on the FodiGate device  It provides the option to preview only the policy package changes before installing them  It install provisioning template changes on the FortiGate device Q32. What does the diagnose dvm check-integrity command do? (Choose two.)  Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax  Verifies and corrects unregistered, registered, and deleted device states  Verifies and corrects database schemas in all object tables  Verifies and corrects duplicate VDOM entries 6.2 Study Guide page 305verify and correct parts of the device manager databases, including:– inconsistent device-to-group and group-to-ADOM memberships– unregistered, registered, and deleted device states– device lock statuses– duplicate VDOM entriesQ33. View the following exhibit.Which statement is true regarding this failed installation log?  Policy ID 2 is installed without a source address  Policy ID 2 will not be installed  Policy ID 2 is installed in disabled state  Policy ID 2 is installed without a source device Q34. An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?  When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package  When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.  When a new policy package is created, the administrator must assign the global policy package from the global ADOM.  When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package. Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20OQ35. What is the purpose of ADOM revisions?  To createSystem Checkpointsfor the FortiManager configuration.  To save the current state of the whole ADOM.  To save the current state of all policy packages and objects for an ADOM.  To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision Fortimanager 6.4 Study guide page 198Q36. Refer to the exhibit.An administrator has created a firewall address object,Trainingwhich is used in the Local-FortiGate policy package.When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for theTrainingfirewall address object?  192.168.0.1/24  10.200.1.0/24  It will create a firewall address group on Local-FortiGate with192.168.0.1/24and10.0.1.0/24object values.  Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings. Q37. An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the managed FortiGate.In which database will the configuration be saved?  Device-level database  Revision history database  ADOM-level database  Configuration-level database https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942Q38. Refer to the exhibit.You are using theQuick Installoption to install configuration changes on the managed FortiGate.Which two statements correctly describe the result? (Choose two.)  It will not create a new revision in the revision history  It installs device-level changes to FortiGate without launching theInstall Wizard  It cannot be canceled once initiated and changes will be installed on the managed device  It provides the option to preview configuration changes prior to installing them FortiManager_6.4_Study_Guide-Online – page 164The Install Config option allows you to perform a quick installation of device-level settings without launching the Install Wizard. When you use this option, you cannot preview the changes prior to committing.Administrator should be certain of the changes before using this install option, because the install can’t be cancelled after the process is initiated.Q39. In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric.Given the administrator’s actions, which statement correctly describes the expected result?  The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.  The authorized FortiGate will be automatically added to the Training ADOM.  The authorized FortiGate will appear in the root ADOM.  The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors. Q40. Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)  The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration  The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices  The Security Fabric settings are part of the device level settings  The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices Q41. Refer to the exhibit.An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.What is the purpose of this command?  It allows FortiGate to unset central management settings.  It allows FortiGate to reboot and recover the previous configuration from its configuration file.  It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.  It allows FortiGate to reboot and restore a previously working firmware image. Reference:https://docs.fortinet.com/document/fortimanager/6.2.0/fortigate-fortimanager-communicationsprotocoQ42. What does a policy package status ofConflictindicate?  The policy package reports inconsistencies and conflicts during aPolicy Consistency Check.  The policy package does not have a FortiGate as the installation target.  The policy package configuration has been changed on both FortiManager and the managed device independently.  The policy configuration has never been imported after a device was registered on FortiManager. Q43. In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?  Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device  Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.  Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.  FortiManager HA state transition is transparent to administrators and does not require any reconfiguration. FortiManager_6.4_Study_Guide-Online – page 346FortiManager HA doesn’t support IP takeover where an HA state transition is transparent to administrators. If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:1. Manually reconfigure one of the secondary devices to become the primary device2. Reconfigure all other secondary devices to point to the new primary deviceQ44. Refer to the exhibit.Which statement about the object named ALL is true?  FortiManager updated the object ALL using the FortiGate value in its database.  FortiManager installed the object ALL with the updated value.  FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.  FortiManager updated the object ALL using the FortiManager value in its database. Q45. An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.How should the Workspace mode be configured on FortiManager?  Set to workflow and use the ADOM locking feature  Set to read/write and use the policy locking feature  Set to normal and use the policy locking feature  Set to disable and use the policy locking feature Reference:https://help.fortinet.com/fmgr/50hlp/52/5-2-0/FMG_520_Online_Help/200_What’s-New.03.03.htmlQ46. View the following exhibit.An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?  10.0.1.0/24  It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values  192.168.0.1/24  Local-FortiGate will automatically choose an IP Network based on its network interface settings.  Loading … Verified NSE5_FMG-7.2 Exam Dumps Q&As - Provide NSE5_FMG-7.2 with Correct Answers: https://www.topexamcollection.com/NSE5_FMG-7.2-vce-collection.html --------------------------------------------------- Images: https://blog.topexamcollection.com/wp-content/plugins/watu/loading.gif https://blog.topexamcollection.com/wp-content/plugins/watu/loading.gif --------------------------------------------------- --------------------------------------------------- Post date: 2024-08-05 12:20:33 Post date GMT: 2024-08-05 12:20:33 Post modified date: 2024-08-05 12:20:33 Post modified date GMT: 2024-08-05 12:20:33