Fortinet NSE5_FMG-7.2 Real 2024 Braindumps Mock Exam Dumps [Q26-Q46]

August 5, 2024 admin 0 Comments

4/5 - (1 vote)

Fortinet NSE5_FMG-7.2 Real 2024 Braindumps Mock Exam Dumps

NSE5_FMG-7.2 Exam Questions | Real NSE5_FMG-7.2 Practice Dumps

Fortinet NSE5_FMG-7.2 certification exam covers a wide range of topics related to network security, including network optimization, security policies, device inventory, configuration management, logging and reporting, and more. It is a vendor-specific certification that demonstrates an individual’s proficiency in using FortiManager to manage and secure network infrastructure.

Fortinet NSE5_FMG-7.2 certification exam is designed to test the knowledge and skills of network security professionals in using FortiManager 7.2 to manage and maintain Fortinet security devices. FortiManager is a centralized management platform that allows organizations to deploy and manage multiple Fortinet security devices from a single console, making it an essential tool for network security administrators.

Q26. Which two settings must be configured for SD-WAN Central Management? (Choose two.)

SD-WAN must be enabled on per-ADOM basis

You can create multiple SD-WAN interfaces per VDOM

When you configure an SD-WAN, you must specify at least two member interfaces.

The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

Q27. Refer to the exhibit.

Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

It supports the FortiManager script feature

It allows making configuration changes for managed devices on FortiManager panes

FortiManager automatically installs the configuration difference in revisions on the managed FortiGate

You cannot assign the same ADOM to multiple administrators

“FortiGate units in the ADOM will query their own configuration every 5 seconds. If there has been a configuration change, the FortiGate unit will send a diff revision on the change to the FortiManager using the FGFM protocol.”

Q28. What is the purpose of the Policy Check feature on FortiManager?

To find and provide recommendation to combine multiple separate policy packages into one common policy package

To find and merge duplicate policies in the policy package

To find and provide recommendation for optimizing policies in a policy package

To find and delete disabled firewall policies in the policy package

Q29. View the following exhibit.

Which of the following statements are true based on this configuration setting? (Choose two.)

This setting will enable the ADOMs feature on FortiManager.

This setting is applied globally to all ADOMs.

This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.

This setting will allow automatic updates to the policy package configuration for a managed device.

Q30. An administrator is replacing a failed device on FortiManager by running the following command:
execute device replace sn <devname> <serialnum>.
Which device name and serial number must the administrator use?

The device name of the new device and serial number of the failed device

The device name and serial number of the failed device

The device name of the failed device and serial number of the new device

The device name and serial number of the new device

Q31. Refer to the exhibit.

You ate using the Quick install option to install configuration changes on the managed FortiGate Which two statements correctly describe the result? (Choose two)

It installs device-level changes on the FortiGate device without launching the Install Wizard

It installs all the changes in the device database first and the administrator must reinstall the changes on the FodiGate device

It provides the option to preview only the policy package changes before installing them

It install provisioning template changes on the FortiGate device

Q32. What does the diagnose dvm check-integrity command do? (Choose two.)

Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

Verifies and corrects unregistered, registered, and deleted device states

Verifies and corrects database schemas in all object tables

Verifies and corrects duplicate VDOM entries

6.2 Study Guide page 305
verify and correct parts of the device manager databases, including:
– inconsistent device-to-group and group-to-ADOM memberships
– unregistered, registered, and deleted device states
– device lock statuses
– duplicate VDOM entries

Q33. View the following exhibit.

Which statement is true regarding this failed installation log?

Policy ID 2 is installed without a source address

Policy ID 2 will not be installed

Policy ID 2 is installed in disabled state

Policy ID 2 is installed without a source device

Q34. An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package

When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.

When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20O

Q35. What is the purpose of ADOM revisions?

To createSystem Checkpointsfor the FortiManager configuration.

To save the current state of the whole ADOM.

To save the current state of all policy packages and objects for an ADOM.

To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision

Fortimanager 6.4 Study guide page 198

Q36. Refer to the exhibit.

An administrator has created a firewall address object,Trainingwhich is used in the Local-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for theTrainingfirewall address object?

192.168.0.1/24

10.200.1.0/24

It will create a firewall address group on Local-FortiGate with192.168.0.1/24and10.0.1.0/24object values.

Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

Q37. An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the managed FortiGate.
In which database will the configuration be saved?

Device-level database

Revision history database

ADOM-level database

Configuration-level database

https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942

Q38. Refer to the exhibit.

You are using theQuick Installoption to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)

It will not create a new revision in the revision history

It installs device-level changes to FortiGate without launching theInstall Wizard

It cannot be canceled once initiated and changes will be installed on the managed device

It provides the option to preview configuration changes prior to installing them

FortiManager_6.4_Study_Guide-Online – page 164
The Install Config option allows you to perform a quick installation of device-level settings without launching the Install Wizard. When you use this option, you cannot preview the changes prior to committing.
Administrator should be certain of the changes before using this install option, because the install can’t be cancelled after the process is initiated.

Q39. In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric.
Given the administrator’s actions, which statement correctly describes the expected result?

The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.

The authorized FortiGate will be automatically added to the Training ADOM.

The authorized FortiGate will appear in the root ADOM.

The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors.

Q40. Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration

The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices

The Security Fabric settings are part of the device level settings

The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices

Q41. Refer to the exhibit.

An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?

It allows FortiGate to unset central management settings.

It allows FortiGate to reboot and recover the previous configuration from its configuration file.

It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

It allows FortiGate to reboot and restore a previously working firmware image.

Reference:https://docs.fortinet.com/document/fortimanager/6.2.0/fortigate-fortimanager-communicationsprotoco

Q42. What does a policy package status ofConflictindicate?

The policy package reports inconsistencies and conflicts during aPolicy Consistency Check.

The policy package does not have a FortiGate as the installation target.

The policy package configuration has been changed on both FortiManager and the managed device independently.

The policy configuration has never been imported after a device was registered on FortiManager.

Q43. In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device

Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

FortiManager_6.4_Study_Guide-Online – page 346
FortiManager HA doesn’t support IP takeover where an HA state transition is transparent to administrators. If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:
1. Manually reconfigure one of the secondary devices to become the primary device
2. Reconfigure all other secondary devices to point to the new primary device

Q44. Refer to the exhibit.

Which statement about the object named ALL is true?

FortiManager updated the object ALL using the FortiGate value in its database.

FortiManager installed the object ALL with the updated value.

FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

FortiManager updated the object ALL using the FortiManager value in its database.

Q45. An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the Workspace mode be configured on FortiManager?

Set to workflow and use the ADOM locking feature

Set to read/write and use the policy locking feature

Set to normal and use the policy locking feature

Set to disable and use the policy locking feature

Reference:https://help.fortinet.com/fmgr/50hlp/52/5-2-0/FMG_520_Online_Help/200_What’s-New.03.03.html

Q46. View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

10.0.1.0/24

It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values

192.168.0.1/24

Local-FortiGate will automatically choose an IP Network based on its network interface settings.

Loading …

Verified NSE5_FMG-7.2 Exam Dumps Q&As – Provide NSE5_FMG-7.2 with Correct Answers: https://www.topexamcollection.com/NSE5_FMG-7.2-vce-collection.html

NSE5_FMG-7.2 Practice Tests

Fortinet NSE5_FMG-7.2 Real 2024 Braindumps Mock Exam Dumps [Q26-Q46]

Related Certifications

NSE6_FAC-6.1
NSE5_FCT-7.0
NSE5_FMG-6.4
NSE6_FWF-6.4
NSE6_FAC-6.4
NSE5_FMG-7.0
NSE5_FMG-7.2
NSE7_EFW-7.0
NSE6_FWB-6.1
NSE6_FWB-6.4