Fortinet nse5-fmg-7-2 practice test
fortinet nse 5 - fortimanager 7.2
Question 1
Refer to the exhibit.
If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)
- A. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
- B. If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
- C. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
- D. FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.
Answer:
ab
Question 2
Refer to the exhibit.
Given the configuration shown in the exhibit, what are two results from this configuration? (Choose two.)
- A. Two or more administrators can make configuration changes at the same time, in the same ADOM.
- B. The same administrator can lock more than one ADOM at the same time.
- C. Concurrent read-write access to an ADOM is disabled.
- D. You can validate administrator login attempts through external servers.
Answer:
bc
Question 3
An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.
What will happen to the Fortinet policy package when it is created?
- A. You need to assign the global policy package from the global ADOM.
- B. You can select the option to assign the global policies.
- C. You need to reapply the global policy package to the ADOM.
- D. It automatically assigns the global policies.
Answer:
c
Question 4
Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?
- A. Routing
- B. NSX-T Service Template
- C. SNMP
- D. Security profiles
Answer:
d
Question 5
What is the advantage of using FortiManager to manage FortiAnalyzer?
- A. It allows FortiManager to manage all FortiGate devices.
- B. It allows FortiManager to run reports based on FortiAnalyzer.
- C. It allows FortiManager to store all managed FortiGate device logs.
- D. It allows FortiManager to act as a collector and FortiAnalyzer device.
Answer:
b
Question 6
What is the purpose of the Policy Check feature on FortiManager?
- A. It compares the policy packages with the revision history, and updates policy packages in the ADOM database.
- B. It provides recommendations for optimizing policies in a policy package.
- C. It merges and creates dynamic mappings for duplicate objects used in a policy package.
- D. It provides recommendations to combine similar policy packages within an ADOM into one single policy package.
Answer:
b
Question 7
Refer to the exhibit.
According to the error message, why is FortiManager failing to add the FortiAnalyzer device?
- A. The administrator must use the correct user name and password of the FortiAnalyzer device.
- B. The administrator must turn off the Use Legacy Device login and add the FortiAnalyzer device to the same network as FortiManager.
- C. The administrator must use the Add Model Device section and discover the FortiAnalyzer device.
- D. The administrator must select the FortiManager administrative access checkbox on the FortiAnalyzer management interface.
Answer:
b
Question 8
In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices only. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric.
Given the administrators actions, which statement correctly describes the expected result?
- A. The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.
- B. The authorized FortiGate will appear in the root ADOM.
- C. The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors.
- D. The authorized FortiGate will be automatically added to the Training ADOM.
Answer:
b
Question 9
Refer to the exhibit.
An administrator is about to add the FortiGate device to FortiManager using the discovery process. FortiManager is operating behind a NAT device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings.
What is the expected result?
- A. During discovery, FortiManager uses only the FortiGate serial number to establish the connection.
- B. During discovery, FortiManager sets the FortiManager NATed IP address on FortiGate.
- C. During discovery, FortiManager sets the NATed device IP address on FortiGate.
- D. During discovery, FortiManager sets both the FortiManager NATed IP address and NAT device IP address on FortiGate.
Answer:
b
Question 10
An administrator has enabled Service Access on FortiManager.
What is the purpose of Service Access on the FortiManager interface?
- A. It allows FortiManager to determine the connection status of managed devices.
- B. It allows administrative access to FortiManager.
- C. It allows third-party applications to gain read/write access to FortiManager.
- D. It allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.
Answer:
d