Refer to the exhibit. Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

It disables concurrent read-write access to an ADOM.

It allows the same administrator to lock more than one ADOM at the same time.

It allows two or more administrators to make configuration changes at the same time, in the same ADOM.

It disables concurrent read-write access to an ADOM.

It allows the same administrator to lock more than one ADOM at the same time.

It is used to validate administrator login attempts through external servers.

Refer to the exhibit. Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

It supports the FortiManager script feature

It allows making configuration changes for managed devices on FortiManager panes

It supports the FortiManager script feature

It allows making configuration changes for managed devices on FortiManager panes

FortiManager automatically installs the configuration difference in revisions on the managed FortiGate

You cannot assign the same ADOM to multiple administrators

Refer to the exhibit. A junior administrator is troubleshooting a FortiManager connectivity issue that rs occurring with managed FortiGate devicesGiven the FortiManager device manager settings shown in the exhibit what can you conclude from the exhibit?

FortiManager test internet connectivity therefore, both devices appear to be down

The administrator had restored the FortiManager configuration file

The administrator must refresh both devices to restore connectivity

FortiManager test internet connectivity therefore, both devices appear to be down

The administrator can reclaim the FGFM tunnel to get both devices online

View the following exhibit. Which one of the following statements is true regarding the object named ALL?

FortiManager updated the object ALL using FortiGate's value in its database

FortiManager updated the object ALL using FortiManager's value in its database

FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

FortiManager installed the object ALL with the updated value.

What is the advantage of using FortiManager to manage PortiAnalyzer?

It allows FortiManager to act as a collector and FortiAnalyzer device

It allows FortiManager to manage all FortiGate devices

It allows FortiManager to fun reports based on FortiAnalyzer

It allows FortiManager to store all managed FortiGate device logs

It allows FortiManager to act as a collector and FortiAnalyzer device

Refer to the exhibit. An administrator is about to add the FortiGate device to FortiManager using the discovery process FortiManager is operating behind a NAT device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settingsWhat is the expected result?

During discovery FortiManager sets the NATed device IP address on FortiGate

During discovery FortiManager sets trie FortiManager NATed IP address on FortiGate

During discovery FortiManager sets both tie FortiManager NATed IP address and NAT device IP address on FortiGate

During discovery FortiManager sets the NATed device IP address on FortiGate

During discovery FortiManager uses only the FortiGate serial number to establish the connection

Refer to the exhibit. Given the configuration shown in the exhibit, what can you conclude from the installation targets m the Install On column? (Choose two)

Policy seq # 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

Policy seq # 1 will be installed on the Remoto-FortiGate root[NAT] and Student[NAT] VDOMs only

Policy seq # 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target

Policy seq # 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

Policy seq # 1 will be installed on the Remoto-FortiGate root[NAT] and Student[NAT] VDOMs only

Policy 3 will be installed on all FortiGate devices and vdom belongs to the ADOM

Policy seq # 3 will be skipped because no installation targets are specified

An administrator is replacing a device on FortiManager by running the following command:execute device replace sn <devname> <serialnum>.What device name and serial number must the administrator use?

Device name of the original device and serial number of the replacement device.

Device name and serial number of the original device.

Device name and serial number of the replacement device.

Device name of the replacement device and serial number of the original device.

Device name of the original device and serial number of the replacement device.

Refer to the exhibit. An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.What is the purpose of this command?

It allows FortiGate to reboot and recover the previous configuration from its configuration file.

It allows FortiGate to unset central management settings.

It allows FortiGate to reboot and recover the previous configuration from its configuration file.

It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

It allows FortiGate to reboot and restore a previously working firmware image.

What is the purpose of ADOM revisions?

To save the current state of all policy packages and objects for an ADOM.

To create System Checkpoints for the FortiManager configuration.

To save the current state of the whole ADOM.

To save the current state of all policy packages and objects for an ADOM.

To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

When a new policy package is created, it automatically assigns the global policies to the new package.

When a new policy package is created, you need to assign the global policy package from the global ADOM.

When a new policy package is created, you need to reapply the global policy package to the ADOM.

When a new policy package is created, you can select the option to assign the global policies to the new package.

What will be the result of reverting to a previous revision version in the revision history?

It will modify the device-level database

It will install configuration changes to managed device automatically

It will tag the device settings status as Auto-Update

It will generate a new version ID and remove all other revision history versions

It will modify the device-level database

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package Fortinet in the custom ADOM1. What will happen to the Fortinet policy package when it is created?

it automatically assigns the global policies

You need to assign the global policy package from the global ADOM

You need to reapply the global poky package to the ADOM

it automatically assigns the global policies

You can select the option to assign the global polices

An administrator created a header and footer global policy package and assigned it to an ADOM.What are two outcomes from this action? (Choose two.)

You must manually move the header and footer policies after the policy assignment.

You can edit or delete all the global objects in the global ADOM.

You must manually move the header and footer policies after the policy assignment.

After you assign the global policy package to an ADOM, the policy package is hidden from the ADOM and cannot be viewed.

If you assign an additional global policy package to the same ADOM, FortiManaqer removes previously assigned policies.

You can edit or delete all the global objects in the global ADOM.

An administrator is replacing a failed device on FortiManager by running the following command:execute device replace sn <devname> <serialnum>.Which device name and serial number must the administrator use?

The device name of the failed device and serial number of the new device

The device name of the new device and serial number of the failed device

The device name and serial number of the failed device

The device name of the failed device and serial number of the new device

The device name and serial number of the new device

Refer to the exhibit. How will FortiManager try to get updates for antivirus and IPS?

From the list of configured override servers or public FDN servers

From the default server fds1.fortinet.com

From the configured override server IP address 10.0.1.50 only

From public FDNI server IP address with the fourth highest octet only

Refer to the exhibit. On FortiManager, an administrator created a new system template named Training with two new DNS addresses. During the installation preview stage, the administrator notices that central-management settings need to be purged.What can be the main reason for the central-management purge command?

The Remote-FortiGate device does not have any DNS server-list configured in the central-management settings.

The DNS addresses in the default system settings are the same as the Training system template.

The ADOM is locked by another administrator.

The Training system template has a default FortiGuard widget.

What does a policy package status of Conflict indicate?

The policy package configuration has been changed on both FortiManager and the managed device independently.

The policy package reports inconsistencies and conflicts during a Policy Consistency Check.

The policy package does not have a FortiGate as the installation target.

The policy package configuration has been changed on both FortiManager and the managed device independently.

The policy configuration has never been imported after a device was registered on FortiManager.

Which two items does an FGFM keepalive message include? (Choose two.)

FortiGate configuration checksum

An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package

When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.

When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

What is the purpose of the Policy Check feature on FortiManager?

To find and provide recommendation for optimizing policies in a policy package

To find and provide recommendation to combine multiple separate policy packages into one common policy package

To find and merge duplicate policies in the policy package

To find and provide recommendation for optimizing policies in a policy package

To find and delete disabled firewall policies in the policy package

Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

When FortiManager installs device-level changes to a managed device

When FortiManager is auto-updated with configuration changes made directly on a managed device

When configuration revision is reverted to previous revision in the revision history

When FortiManager installs device-level changes to a managed device

When FortiManager is auto-updated with configuration changes made directly on a managed device

When changes to device-level database is made on FortiManager

Which of the following statements are true regarding VPN Manager? (Choose three.)

VPN Manager must be enabled on a per ADOM basis.

VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.

VPN Manager must be enabled on a per ADOM basis.

VPN Manager automatically adds newly-registered devices to a VPN community.

VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.

VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?

Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.

Changes to the AP's state must be performed directly on the managed FortiGate.

Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.

Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

View the following exhibit. Which of the following statements are true based on this configuration setting? (Choose two.)

This setting is applied globally to all ADOMs.

This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.

This setting will enable the ADOMs feature on FortiManager.

This setting is applied globally to all ADOMs.

This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.

This setting will allow automatic updates to the policy package configuration for a managed device.

View the following exhibit: An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager. What name will be used to display the firewall policy for port1?

port1 on FortiGate and WAN on FortiManager

port1 on both FortiGate and FortiManager

WAN zone on FortiGate and WAN zone on FortiManager

WAN zone on FortiGate and WAN interface on FortiManager

Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

To push these changes to a managed device, it required an install operation to the managed FortiGate.

It will modify device-level database

To push these changes to a managed device, it required an install operation to the managed FortiGate.

Reverting to a previous revision history will generate a new version ID and remove all other history

Reverting to a previous revision history will tag the device settings status as Auto-Update.

It will modify device-level database

Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

Managed gateways are devices managed by FortiManager in the same ADOM

Managed devices in other ADOMs must be treated as external gateways

Managed gateways are devices managed by FortiManager in the same ADOM

External gateways are third-party VPN gateway devices only

Protected subnets are the subnets behind the device that you don't want to allow access to over the IPsec VPN

Managed devices in other ADOMs must be treated as external gateways

Refer to the exhibit. Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?

FortiManager ignored the firewall service category General and did not update Its database with the value

FortiManager ignored the firewall service category General but created a new service category in its database.

FortiManager ignored the firewall service category general and deleted the duplicate value In Its database

FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.

FortiManager ignored the firewall service category General and did not update Its database with the value

What will happen if FortiAnalyzer features are enabled on FortiManager?

FortiManager will install the logging configuration to the managed devices

FortiManager will keep all the logs and reports on the FortiManager.

FortiManager will enable ADOMs to collect logs automatically from non-FortiGate devices.

FortiManager will install the logging configuration to the managed devices

FortiManager can be used only as a logging device.

Which two settings are required for FortiManager Management Extension Applications (MEA)? (Choose two.)

You must create a MEA special policy on FortiManager using the super user profile

The administrator must have the super user profile.

When you configure MEA, you must open TCP or UDP port 540.

You must open the ports to the Fortinet registry

You must create a MEA special policy on FortiManager using the super user profile

The administrator must have the super user profile.

In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric.Given the administrator's actions, which statement correctly describes the expected result?

The authorized FortiGate will appear in the root ADOM.

The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.

The authorized FortiGate will be automatically added to the Training ADOM.

The authorized FortiGate will appear in the root ADOM.

The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors.

Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

When changes to the device-level database are made on FortiManager

When FortiManager installs device-level changes on a managed device

When FortiManager is auto-updated with configuration changes made directly on a managed device

When changes to the device-level database are made on FortiManager

When FortiManager installs device-level changes on a managed device

When a configuration revision is reverted to a previous revision in the revision history

Refer to the exhibit. An administrator would like to create three ADOMs on FortiManager with different access levels based on departments.What two conclusions can you draw from the design shown in the exhibit? (Choose two.)

The FortiManager policies and objects database can be shared between the Financial and HR ADOMs.

The administrator must set the FortiManager ADOM mode to Advanced.

Admin A can access VDOM2 and VDOM3 with the super user profile.

The FortiManager policies and objects database can be shared between the Financial and HR ADOMs.

The administrator must set the FortiManager ADOM mode to Advanced.

The administrator must configure FortiManager in workspace mode.

Fortinet NSE5_FMG-7.2 Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

An administrator's PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.

How can the administrator unlock the ADOM?

Restore the configuration from a previous backup.

Delete the previous admin session manually through the FortiManager GUI or CLI.

Comment (0)

Fortinet NSE5_FMG-7.2 Practice Test 2

Question

Fortinet NSE5_FMG-7.2 Practice Tests

Practice Tests