Download Exam NSE5_FMG-7.2 Practice Test Questions with 100% Verified Answers [Q36-Q57]

4.5/5 - (2 votes)

Download Exam NSE5_FMG-7.2 Practice Test Questions with 100% Verified Answers

Share Latest NSE5_FMG-7.2Test Practice Test Questions, Exam Dumps

NO.36 Which of the following statements are true regarding VPN Manager? (Choose three.)

VPN Manager must be enabled on a per ADOM basis.

VPN Manager automatically adds newly-registered devices to a VPN community.

VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.

VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

NO.37 In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device

Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

NO.38 Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

It allows two or more administrators to make configuration changes at the same time, in the same ADOM.

It disables concurrent read-write access to an ADOM.

It allows the same administrator to lock more than one ADOM at the same time.

It is used to validate administrator login attempts through external servers.

NO.39 An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package Fortinet in the custom ADOM1. What will happen to the Fortinet policy package when it is created?

You need to assign the global policy package from the global ADOM

You need to reapply the global poky package to the ADOM

it automatically assigns the global policies

You can select the option to assign the global polices

NO.40 In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

The FortiGate will be added automatically to the default ADOM named FortiGate.

The FortiGate will be automatically added to the Training ADOM.

By default, the unregistered FortiGate will appear in the root ADOM.

The FortiManager administrator must add the unregistered device manually to the unregistered device

NO.41 An administrator with theSuper_Userprofile is unable to log in to FortiManager because of an authentication failure message.
Which troubleshooting step should you take to resolve the issue?

Make sure FortiManager Access is enabled in the administrator profile

Make sure Offline Mode is disabled

Make sure the administrator IP address is part of the trusted hosts.

Make sure ADOMs are enabled and the administrator has access to the Global ADOM

NO.42 Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

To push these changes to a managed device, it required an install operation to the managed FortiGate.

Reverting to a previous revision history will generate a new version ID and remove all other history

Reverting to a previous revision history will tag the device settings status as Auto-Update.

It will modify device-level database

NO.43 An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package

When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.

When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

NO.44 Refer to the exhibit.

An administrator has created a firewall address object,Trainingwhich is used in the Local-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for theTrainingfirewall address object?

192.168.0.1/24

10.200.1.0/24

It will create a firewall address group on Local-FortiGate with192.168.0.1/24and10.0.1.0/24object values.

Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

NO.45 View the following exhibit.

Which statement is true regarding this failed installation log?

Policy ID 2 is installed without a source address

Policy ID 2 will not be installed

Policy ID 2 is installed in disabled state

Policy ID 2 is installed without a source device

NO.46 View the following exhibit:

Which two statements are true if the script is executed using theRemote FortiGate Directly (via CLI)option?
(Choose two.)

You must install these changes usingInstall Wizard

FortiGate will auto-update the FortiManager’s device-level database.

FortiManager will create a new revision history.

FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

NO.47 An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the managed FortiGate.
In which database will the configuration be saved?

Device-level database

Revision history database

ADOM-level database

Configuration-level database

NO.48 Refer to the exhibit.

You are using theQuick Installoption to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)

It will not create a new revision in the revision history

It installs device-level changes to FortiGate without launching theInstall Wizard

It cannot be canceled once initiated and changes will be installed on the managed device

It provides the option to preview configuration changes prior to installing them

NO.49 Refer to the exhibit.

An administrator wants to create a policy on the Staging ADOM in backup mode, and install it on the FortiGate device in the same ADOM.
How can the administrator perform this task?

The administrator must use the Policy & Objects section to create a policy first.

The administrator must use the I ortiManager script.

The administrator must disable the FortiManager offline mode first.

The administrator must change the ADOM mode to Advanced to bring the FortiManager online.

NO.50 Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

The FortiManager ADOM workspace mode is set to Normal.

An administrator can also lock the Local-FortiGate-1 policy package.

The FortiManager ADOM is locked by the administrator.

FortiManager is in workflow mode.

NO.51 Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

Managed gateways are devices managed by FortiManager in the same ADOM

External gateways are third-party VPN gateway devices only

Protected subnets are the subnets behind the device that you don’t want to allow access to over the IPsec VPN

Managed devices in other ADOMs must be treated as external gateways

NO.52 Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?

NSX-T Service Template

Security profiles

SNMP

Routing

NO.53 Refer to the exhibit.

Given the configuration shown in the exhibit, what can you conclude from the installation targets m the Install On column? (Choose two)

Policy seq # 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target

Policy seq # 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

Policy seq # 1 will be installed on the Remoto-FortiGate root[NAT] and Student[NAT] VDOMs only

Policy 3 will be installed on all FortiGate devices and vdom belongs to the ADOM

Policy seq # 3 will be skipped because no installation targets are specified

NO.54 Refer to the exhibit.

An administrator is about to add the FortiGate device to FortiManager using the discovery process FortiManager is operating behind a NAT device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings What is the expected result?

During discovery FortiManager sets trie FortiManager NATed IP address on FortiGate

During discovery FortiManager sets both tie FortiManager NATed IP address and NAT device IP address on FortiGate

During discovery FortiManager sets the NATed device IP address on FortiGate

During discovery FortiManager uses only the FortiGate serial number to establish the connection

NO.55 View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

FortiManager updated the object ALL using FortiGate’s value in its database

FortiManager updated the object ALL using FortiManager’s value in its database

FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

FortiManager installed the object ALL with the updated value.

NO.56 Which two statements regarding device management on FortiManager are true? (Choose two.)

FortiGate devices in HA cluster devices are counted as a single device.

FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

The maximum number of managed devices for each ADOM is 500.

NO.57 Refer to the exhibit.

Which two statements are true if the script is executed using theDevice Databaseoption? (Choose two.)

You must install these changes using theInstall Wizardto a managed device

The successful execution of a script on theDevice Databasewill create a new revision history

The script history will show successful installation of the script on the remote FortiGate

TheDevice Settings Statuswill be tagged asModified

Fortinet NSE5_FMG-7.2 certification exam is a vendor-neutral certification that is recognized globally. It is designed for professionals who have experience in managing and maintaining Fortinet security devices and want to demonstrate their skills and knowledge in FortiManager 7.2. NSE5_FMG-7.2 exam covers various topics, including device registration, configuration management, policy management, and administration.

Positive Aspects of Valid Dumps NSE5_FMG-7.2 Exam Dumps!: https://www.dumpsreview.com/NSE5_FMG-7.2-exam-dumps-review.html