[Q11-Q32] Dumps for Free Fortinet NSE5_FMG-7.0 Practice Exam Questions [May 18, 2024]

Rate this post

Dumps for Free Fortinet NSE5_FMG-7.0 Practice Exam Questions [May 18, 2024]

NSE5_FMG-7.0 Dumps PDF And Certification Training

Fortinet NSE5_FMG-7.0 is an exam that is designed to test the knowledge of professionals who are interested in becoming certified as Fortinet NSE 5 – FortiManager 7.0. NSE5_FMG-7.0 exam is designed to test the skills and knowledge of candidates in managing, configuring, and deploying FortiManager 7.0. NSE5_FMG-7.0 exam is intended for individuals who have experience with the Fortinet security fabric and those who are responsible for the management of Fortinet devices.

NO.11 An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package Fortinet in the custom ADOM1. What will happen to the Fortinet policy package when it is created?

You need to assign the global policy package from the global ADOM

You need to reapply the global poky package to the ADOM

it automatically assigns the global policies

You can select the option to assign the global polices

NO.12 View the following exhibit:

Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI) option? (Choose two.)

You must install these changes using Install Wizard

FortiGate will auto-update the FortiManager’s device-level database.

FortiManager will create a new revision history.

FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

NO.13 View the following exhibit.

Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?

The Install On column value represents successful installation on the managed devices

Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

Policy seq#3 will be installed on the Trainer[NAT] VDOM only

Policy seq#3 will be not installed on any managed device

NO.14 Which two settings are required for FortiManager Management Extension Applications (MEA)? (Choose two.)

When you configure MEA, you must open TCP or UDP port 540.

You must open the ports to the Fortinet registry

You must create a MEA special policy on FortiManager using the super user profile

The administrator must have the super user profile.

NO.15 Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

Managed gateways are devices managed by FortiManager in the same ADOM

External gateways are third-party VPN gateway devices only

Protected subnets are the subnets behind the device that you don’t want to allow access to over the IPsec VPN

Managed devices in other ADOMs must be treated as external gateways

NO.16 An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

When creating a new policy package, the administrator can select the option to assign the global policy
package to the new policy package

When a new policy package is created, the administrator needs to reapply the global policy package to
ADOM1.

When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

NO.17 What is the advantage of using FortiManager to manage PortiAnalyzer?

It allows FortiManager to manage all FortiGate devices

It allows FortiManager to fun reports based on FortiAnalyzer

It allows FortiManager to store all managed FortiGate device logs

It allows FortiManager to act as a collector and FortiAnalyzer device

NO.18 Refer to the exhibit.

Which two statements about the output are true? (Choose two.)

The latest revision history for the managed FortiGate does match with the FortiGate running configuration

Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed

The latest history for the managed FortiGate does not match with the device-level database

Configuration changes directly made on the FortiGate have been automatically updated to device-level

database
Explanation:
STATUS: dev-db: modified; conf: in sync; cond: pending; dm: retrieved; conn: up – dev-db: modified – This is the device setting status which indicates that configuration changes were made on FortiManager. – conf: in sync – This is the sync status which shows that the latest revision history is in sync with Fortigate’s configuration. – cond: pending – This is the configuration status which says that configuration changes need to be installed.
Most probably a retrieve was done in the past (dm: retrieved) updating the revision history DB (conf: in sync) and FortiManager device level DB, now there is a new modification on FortiManager device level DB (dev-db: modified) which wasn’t installed to FortiGate (cond: pending), hence; revision history DB is not aware of that modification and doesn’t match device DB.
Conclusion: – Revision DB does match FortiGate. – No changes were installed to FortiGate yet. – Device DB doesn’t match Revision DB. – No changes were done on FortiGate (auto-update) but configuration was retrieved instead
After an Auto-Update or Retrieve: device database = latest revision = FGT
Then after a manual change on FMG end (but no install yet): latest revision = FGT (still) but now device database has been modified (is different).
After reverting to a previous revision in revision history: device database = reverted revision != FGT

NO.19 Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

To push these changes to a managed device, it required an install operation to the managed FortiGate.

Reverting to a previous revision history will generate a new version ID and remove all other history

Reverting to a previous revision history will tag the device settings status as Auto-Update.

It will modify device-level database

NO.20 View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

FortiManager updated the object ALL using FortiGate’s value in its database

FortiManager updated the object ALL using FortiManager’s value in its database

FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

FortiManager installed the object ALL with the updated value.

NO.21 When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

FortiManager will revert and install a previous configuration revision on the managed FortiGate.

FortiGate will reject the CLI commands that will cause the tunnel to go down.

FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.

The configuration change will break the fgfm connection, causing the FortiGate unit to attempt to reconnect for 900 seconds. If the FortiGate cannot reconnect, it will rollback to its previous configuration.

NO.22 Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

Managed gateways are devices managed by FortiManager in the same ADOM

External gateways are third-party VPN gateway devices only

Protected subnets are the subnets behind the device that you don’t want to allow access to over the IPsec
VPN

Managed devices in other ADOMs must be treated as external gateways

NO.23 View the following exhibit.

What is the purpose of setting ADOM Mode to Advanced?

The setting allows automatic updates to the policy package configuration for a managed device

The setting enables the ADOMs feature on FortiManager

This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.

The setting disables concurrent ADOM access and adds ADOM locking

NO.24 An administrator is in the process of moving the system template profile between ADOMs by running the following command:
execute improfile import-profile ADOM2 3547 /tmp/myfile
Where does the administrator import the file from?

File system

ADOM1

ADOM2 object database

ADOM2

NO.25 An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.
Which troubleshooting step should you take to resolve the issue?

Make sure FortiManager Access is enabled in the administrator profile

Make sure Offline Mode is disabled

Make sure the administrator IP address is part of the trusted hosts.

Make sure ADOMs are enabled and the administrator has access to the Global ADOM

Even if a user entered the correct userid/password, the FMG denies access if a user is logging in from an untrusted source IP subnets.

NO.26 An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?

FortiManager will not allow the administrator to delete a referenced address object

FortiManager will disable the status of the referenced firewall policy

FortiManager will replace the deleted address object with the none address object in the referenced
firewall policy

FortiManager will replace the deleted address object with all address object in the referenced firewall policy

NO.27 An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.
Which interface must the administrator select in the static route device drop-down list?

port2

virtual-wan-link

port1

auto-discovery

NO.28 In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric.
Given the administrator’s actions, which statement correctly describes the expected result?

The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.

The authorized FortiGate will be automatically added to the Training ADOM.

The authorized FortiGate will appear in the root ADOM.

The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors.

NO.29 Refer to the exhibit.

You ate using the Quick install option to install configuration changes on the managed FortiGate Which two statements correctly describe the result? (Choose two)

It installs device-level changes on the FortiGate device without launching the Install Wizard

It installs all the changes in the device database first and the administrator must reinstall the changes on the FodiGate device

It provides the option to preview only the policy package changes before installing them

It install provisioning template changes on the FortiGate device

NO.30 An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.
Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

When a new policy package is created, it automatically assigns the global policies to the new package.

When a new policy package is created, you need to assign the global policy package from the global
ADOM.

When a new policy package is created, you need to reapply the global policy package to the ADOM.

When a new policy package is created, you can select the option to assign the global policies to the new package.

Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).

NO.31 What is the purpose of the Policy Check feature on FortiManager?

To find and provide recommendation to combine multiple separate policy packages into one common policy package

To find and merge duplicate policies in the policy package

To find and provide recommendation for optimizing policies in a policy package

To find and delete disabled firewall policies in the policy package

NO.32 Refer to the exhibit.

Which two statements about the output are true? (Choose two.)

The latest revision history for the managed FortiGate does match with the FortiGate running configuration

Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed

The latest history for the managed FortiGate does not match with the device-level database

Configuration changes directly made on the FortiGate have been automatically updated to device-level

database
Explanation:
STATUS: dev-db: modified; conf: in sync; cond: pending; dm: retrieved; conn: up – dev-db: modified – This is the device setting status which indicates that configuration changes were made on FortiManager. – conf: in sync – This is the sync status which shows that the latest revision history is in sync with Fortigate’s configuration. – cond: pending – This is the configuration status which says that configuration changes need to be installed.
Most probably a retrieve was done in the past (dm: retrieved) updating the revision history DB (conf: in sync) and FortiManager device level DB, now there is a new modification on FortiManager device level DB (dev-db: modified) which wasn’t installed to FortiGate (cond: pending), hence; revision history DB is not aware of that modification and doesn’t match device DB.
Conclusion: – Revision DB does match FortiGate. – No changes were installed to FortiGate yet. – Device DB doesn’t match Revision DB. – No changes were done on FortiGate (auto-update) but configuration was retrieved instead After an Auto-Update or Retrieve: device database = latest revision = FGT Then after a manual change on FMG end (but no install yet): latest revision = FGT (still) but now device database has been modified (is different).
After reverting to a previous revision in revision history: device database = reverted revision != FGT

Loading …

Fortinet NSE5_FMG-7.0 exam is intended for network administrators, security engineers, and other IT professionals who are responsible for managing security policies and devices in their organization. NSE5_FMG-7.0 exam tests the candidate’s ability to configure, deploy and manage Fortinet security solutions using FortiManager 7.0. NSE5_FMG-7.0 exam also covers topics such as device discovery, policy management, user authentication, and configuration backup.

Check your preparation for Fortinet NSE5_FMG-7.0 On-Demand Exam: https://www.examboosts.com/Fortinet/NSE5_FMG-7.0-practice-exam-dumps.html