Download Free Fortinet NSE5_FMG-7.0 Real Exam Questions Download
Latest Fortinet NSE5_FMG-7.0 Real Exam Dumps PDF
NEW QUESTION # 31
Refer to the exhibits.
Exhibit one.
Exhibit two.
An administrator created a new system template named Training with two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed.
What can be the main reason for these unset commands?
- A. The Training system template has other default settings
- B. The ADOM is locked by another administrator
- C. The DNS addresses in the default system settings are the same as the Training system template
- D. The Training system template does not have assigned devices
Answer: A
NEW QUESTION # 32
An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?
- A. FortiManager will replace the deleted address object with the none address object in the referenced
firewall policy - B. FortiManager will disable the status of the referenced firewall policy
- C. FortiManager will not allow the administrator to delete a referenced address object
- D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy
Answer: A
NEW QUESTION # 33
An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.
Which interface must the administrator select in the static route device drop-down list?
- A. port2
- B. auto-discovery
- C. port1
- D. virtual-wan-link
Answer: D
NEW QUESTION # 34
An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?
- A. You must specify a gateway address when you create a default static route
- B. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route
- C. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.
- D. Remove all the interface references such as routes or policies
Answer: C
NEW QUESTION # 35
An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.
Which troubleshooting step should you take to resolve the issue?
- A. Make sure ADOMs are enabled and the administrator has access to the Global ADOM
- B. Make sure FortiManager Access is enabled in the administrator profile
- C. Make sure Offline Mode is disabled
- D. Make sure the administrator IP address is part of the trusted hosts.
Answer: D
Explanation:
Even if a user entered the correct userid/password, the FMG denies access if a user is logging in from an untrusted source IP subnets.
Topic 1, Main Questions Pool B
NEW QUESTION # 36
Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)
- A. Protected subnets are the subnets behind the device that you don't want to allow access to over the IPsec VPN
- B. Managed devices in other ADOMs must be treated as external gateways
- C. Managed gateways are devices managed by FortiManager in the same ADOM
- D. External gateways are third-party VPN gateway devices only
Answer: B,C
NEW QUESTION # 37
Refer to the exhibit.
According to the error message why is FortiManager failing to add the FortiAnalyzer device?
- A. The administrator must select the Forti-Manager administrative access checkbox on the FortiAnalyzer management interface
- B. The administrator must use the Add Model Device section and discover the FortiAnaJyzer device
- C. The administrator must turn off the Use Legacy Device login and add the FortiAnaJyzer device to the same network as Forti-Manager
- D. The administrator must use the correct user name and password of the FortiAnalyzer device
Answer: A
NEW QUESTION # 38
Refer to the exhibit.
A junior administrator is troubleshooting a FortiManager connectivity issue that rs occurring with managed FortiGate devices Given the FortiManager device manager settings shown in the exhibit what can you conclude from the exhibit?
- A. FortiManager test internet connectivity therefore, both devices appear to be down
- B. The administrator had restored the FortiManager configuration file
- C. The administrator must refresh both devices to restore connectivity
- D. The administrator can reclaim the FGFM tunnel to get both devices online
Answer: A
NEW QUESTION # 39
View the following exhibit.
Which one of the following statements is true regarding the object named ALL?
- A. FortiManager updated the object ALL using FortiManager's value in its database
- B. FortiManager created the object ALL as a unique entity in its database, which can be only used by this
managed FortiGate. - C. FortiManager updated the object ALL using FortiGate's value in its database
- D. FortiManager installed the object ALL with the updated value.
Answer: C
NEW QUESTION # 40
In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?
- A. By default, the unregistered FortiGate will appear in the root ADOM.
- B. The FortiGate will be automatically added to the Training ADOM.
- C. The FortiGate will be added automatically to the default ADOM named FortiGate.
- D. The FortiManager administrator must add the unregistered device manually to the unregistered device
Answer: A
Explanation:
manually to the Training ADOM using the Add Device wizard
NEW QUESTION # 41
View the following exhibit.
An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?
- A. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
- B. The unused objects that are not tied to the firewall policies in policy package will be deleted from the
- C. The unused objects that are not tied to the firewall policies will be installed on FortiGate
- D. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
Answer: A
Explanation:
FortiManager database
NEW QUESTION # 42
When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?
- A. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
- B. FortiGate will reject the CLI commands that will cause the tunnel to go down.
- C. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.
- D. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
Answer: D
NEW QUESTION # 43
Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)
- A. The Security Fabric settings are part of the device level settings
- B. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices
- C. The Security Fabric license, group name and password are required for the FortiManager Security Fabric
integration - D. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices
Answer: A,D
NEW QUESTION # 44
What is the purpose of ADOM revisions?
- A. To save the current state of the whole ADOM.
- B. To create System Checkpoints for the FortiManager configuration.
- C. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision
- D. To save the current state of all policy packages and objects for an ADOM.
Answer: D
Explanation:
Fortimanager 6.4 Study guide page 198
NEW QUESTION # 45
View the following exhibit.
An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?
- A. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
- B. The unused objects that are not tied to the firewall policies in policy package will be deleted from the
- C. The unused objects that are not tied to the firewall policies will be installed on FortiGate
- D. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
Answer: A
Explanation:
FortiManager database
NEW QUESTION # 46
An administrator is in the process of moving the system template profile between ADOMs by running the following command:
execute improfile import-profile ADOM2 3547 /tmp/myfile
Where does the administrator import the file from?
- A. ADOM1
- B. ADOM2 object database
- C. File system
- D. ADOM2
Answer: B
NEW QUESTION # 47
An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?
- A. Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.
- B. Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.
- C. Changes to the AP's state must be performed directly on the managed FortiGate.
- D. Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.
Answer: B
NEW QUESTION # 48
Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)
- A. Protected subnets are the subnets behind the device that you don't want to allow access to over the IPsec
VPN - B. Managed devices in other ADOMs must be treated as external gateways
- C. Managed gateways are devices managed by FortiManager in the same ADOM
- D. External gateways are third-party VPN gateway devices only
Answer: B,C
NEW QUESTION # 49
......
PDF (New 2024) Actual Fortinet NSE5_FMG-7.0 Exam Questions: https://www.examslabs.com/Fortinet/NSE-5-Network-Security-Analyst/best-NSE5_FMG-7.0-exam-dumps.html
NSE5_FMG-7.0 Exam Dumps, NSE5_FMG-7.0 Practice Test Questions: https://drive.google.com/open?id=1d4QIQ-McbBWP789HaBlXDsWASARMjZUE