Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Home
Fortinet
NSE 5 Network Security Analyst
NSE5_FMG-7.2
Fortinet NSE 5 - FortiManager 7.2 Questions and Answers

Pass the Fortinet NSE 5 Network Security Analyst NSE5_FMG-7.2 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam NSE5_FMG-7.2 Premium Access

View all detail and faqs for the NSE5_FMG-7.2 exam

Go to Exam

391 Students Passed

96% Average Score

90% Same Questions

Viewing page 1 out of 3 pages

Viewing questions 1-10 out of questions

Questions # 1:

View the following exhibit.

Question # 1

When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

Options:

Once initiated, the install process cannot be canceled and changes will be installed on the managed device

Will not create new revision in the revision history

Installs device-level changes to FortiGate without launching the Install Wizard

Provides the option to preview configuration changes prior to installing them

Answer

A, C

Questions # 2:

Refer to the exhibit.

Question # 2

How will FortiManager try to get updates for antivirus and IPS?

Options:

From the list of configured override servers or public FDN servers

From the default server fds1.fortinet.com

From the configured override server IP address 10.0.1.50 only

From public FDNI server IP address with the fourth highest octet only

Answer

Explanation

FortiManager tries to obtain updates from the servers configured in the Use Override Server Address for FortiGate/FortiMail section. Depending on the Server Override Mode configuration, you can restrict FortiManager to receiving updates from the configured override servers list, or allowing fallback to other public FDS servers, if FortiManager is not able to communicate and receive updates from the configured server list. In the example shown on this slide, two override server addresses are configured. When Server Override Mode is set to Strict, FortiManager gets updates only from these two servers. There is no fallback to other public servers, if these two configured servers are not available. If you set Server Override Mode to Loose, FortiManager first tries to get updates from the configured server list; if they are unavailable, FortiManager falls back to other public FDS servers to get updates. Reference [Page 357] - https://ebin.pub/fortinet-fortimanager-study-guide-for-fortimanager-72.html

Questions # 3:

In the event that one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?

Options:

The FortiManaqer HA state transition is transparent to administrators and does not require any reconfiguration.

Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.

Reconfigure the primary device to remove the peer IP of the failed device.

Reboot the failed device to remove its IP from the primary device.

Answer

Explanation

If the secondary FortiManager fails, you can: - Reconfigure the primary device to remove the peer IP of the failed secondary device - Leave the configuration so that when the secondary device comes online, it can resynchronize with the primary.

Questions # 4:

What is the advantage of using FortiManager to manage PortiAnalyzer?

Options:

It allows FortiManager to manage all FortiGate devices

It allows FortiManager to fun reports based on FortiAnalyzer

It allows FortiManager to store all managed FortiGate device logs

It allows FortiManager to act as a collector and FortiAnalyzer device

Answer

Questions # 5:

Refer to the exhibit.

Question # 5

You ate using the Quick install option to install configuration changes on the managed FortiGate

Which two statements correctly describe the result? (Choose two)

Options:

It installs device-level changes on the FortiGate device without launching the Install Wizard

It installs all the changes in the device database first and the administrator must reinstall the changes on the FodiGate device

It provides the option to preview only the policy package changes before installing them

It install provisioning template changes on the FortiGate device

Answer

A, D

Questions # 6:

Refer to the exhibit.

Question # 6

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM, which has four policy packages. The customer administrator has access onlytoMy_ADOM.

How can customer or service provider administrators remove both global header and footer policies from the policy package named Shared_Package?

Options:

The service provider administrator can unassign both policies from the global ADOM.

The service provider administrator can unassign both global policies from My_ADOM.

The customer administrator can unassign both polices by locking My_ADOM.

The customer administrator can unassign both global polices from My_ADOM.

Answer

Explanation

FortiManager_7.2_Study_Guide-Online.pdf page 17: In the global ADOM layer, you create header and footer policy rules. You can assing these policy rules to multiple ADOMs.

Questions # 7:

An administrator is in the process of moving the system template profile between ADOMs by running the following command:

execute improfile import-profile ADOM2 3547 /tmp/myfile

Where does the administrator import the file from?

Options:

File system

ADOM1

ADOM2 object database

ADOM2

Answer

Questions # 8:

Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

Options:

Managed gateways are devices managed by FortiManager in the same ADOM

External gateways are third-party VPN gateway devices only

Protected subnets are the subnets behind the device that you don’t want to allow access to over the IPsec

VPN

Managed devices in other ADOMs must be treated as external gateways

Answer

A, D

Explanation

[Reference: http://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/1300_VPN_Manager/0800_IPsec_VPN_Gateway/0400_Create_mngd_gateway.htm, , , ]

Questions # 9:

Refer to the exhibit.

Question # 9

A junior administrator is troubleshooting a FortiManager connectivity issue that rs occurring with managed FortiGate devices

Given the FortiManager device manager settings shown in the exhibit what can you conclude from the exhibit?

Options:

The administrator had restored the FortiManager configuration file

The administrator must refresh both devices to restore connectivity

FortiManager test internet connectivity therefore, both devices appear to be down

The administrator can reclaim the FGFM tunnel to get both devices online

Answer

Questions # 10:

In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric.

Given the administrator's actions, which statement correctly describes the expected result?

Options:

The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.

The authorized FortiGate will be automatically added to the Training ADOM.

The authorized FortiGate will appear in the root ADOM.

The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors.

Answer

Viewing page 1 out of 3 pages

Viewing questions 1-10 out of questions

Modal title

Registered Required

In order to participate in the comments you need to be logged-in.
You can sign-up or login (it's free).

TOP CODES

Top selling exam codes in the certification world, popular, in demand and updated to help you pass on the first try.

2V0-11.25

ADM-201

Agentforce-Specialist

CMMC-CCP

Data-Cloud-Consultant

PCNSE

PDI

PSE-Strata-Pro-24

Secure-Software-Design

Sharing-and-Visibility-Architect

Workday-Pro-Integrations

ZDTA