TrainingDump NSE5_FMG-7.0 Dumps PDF - 100% Passing Guarantee [Q29-Q52]

4.4/5 - (5 votes)

TrainingDump NSE5_FMG-7.0 Dumps PDF – 100% Passing Guarantee

NSE5_FMG-7.0 Braindumps Real Exam Updated on Aug 31, 2022 with 65 Questions

Fortinet NSE5_FMG-7.0 Exam Syllabus Topics:

Topic	Details
Topic 1	Perform the import and installation methods Diagnose issues using the revision history
Topic 2	Troubleshoot import and installation issues Perform policy and object management
Topic 3	Troubleshoot policy and object management Install configuration changes using scripts
Topic 4	Identify ADOM revisions and database versions Implement and troubleshoot FortiManager HA
Topic 5	Troubleshoot device settings Register devices in ADOMs Configure FortiGuard services
Topic 6	Configure various management panes and extensions Configure administrative domains (ADOMs)
Topic 7	Configure different administrative access levels using the workspace Troubleshoot FortiManager deployment scenarios

Q29. Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

It allows two or more administrators to make configuration changes at the same time, in the same ADOM.

It disables concurrent read-write access to an ADOM.

It allows the same administrator to lock more than one ADOM at the same time.

It is used to validate administrator login attempts through external servers.

Q30. An administrator’s PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.
How can the administrator unlock the ADOM?

Restore the configuration from a previous backup.

Delete the previous admin session manually through the FortiManager GUI or CLI.

Q31. An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.
Which interface must the administrator select in the static route device drop-down list?

port2

virtual-wan-link

port1

auto-discovery

Q32. View the following exhibit:

How will FortiManager try to get updates for antivirus and IPS?

From the list of configured override servers with ability to fall back to public FDN servers

From the configured override server list only

From the default server fdsl.fortinet.com

From public FDNI server with highest index number only

Q33. What are two outcomes of ADOM revisions? (Choose two.)

ADOM revisions can significantly increase the size of the configuration backups.

ADOM revisions can save the current size of the whole ADOM

ADOM revisions can create System Checkpoints for the FortiManager configuration

ADOM revisions can save the current state of all policy packages and objects for an ADOM

Q34. What does the diagnose dvm check-integrity command do? (Choose two.)

Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM
syntax

Verifies and corrects unregistered, registered, and deleted device states

Verifies and corrects database schemas in all object tables

Verifies and corrects duplicate VDOM entries

Q35. Refer to the exhibit.

Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

It supports the FortiManager script feature

It allows making configuration changes for managed devices on FortiManager panes

FortiManager automatically installs the configuration difference in revisions on the managed FortiGate

You cannot assign the same ADOM to multiple administrators

Q36. Which configuration setting for FortiGate is part of a device-level database on FortiManager?

VIP and IP Pools

Firewall policies

Security profiles

Routing

Q37. An administrator would like to create an SD-WAN using central management. What steps does the
administrator need to perform to create an SD-WAN using central management?

First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route

You must specify a gateway address when you create a default static route

Remove all the interface references such as routes or policies

Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.

Q38. What is the purpose of the Policy Check feature on FortiManager?

To find and provide recommendation to combine multiple separate policy packages into one common
policy package

To find and merge duplicate policies in the policy package

To find and provide recommendation for optimizing policies in a policy package

To find and delete disabled firewall policies in the policy package

Q39. Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

To push these changes to a managed device, it required an install operation to the managed FortiGate.

Reverting to a previous revision history will generate a new version ID and remove all other history

Reverting to a previous revision history will tag the device settings status as Auto-Update.

It will modify device-level database

Q40. View the following exhibit.

If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on
FortiGate under central management.

During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

Q41. An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?

Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP’s state do not require installation.

Changes to the AP’s state must be performed directly on the managed FortiGate.

Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.

Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

Q42. Which two items are included in the FortiManager backup? (Choose two.)

FortiGuard database

Global database

Logs

All devices

Q43. In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

Secondary device with highest priority will automatically be promoted to the primary role, and manually
reconfigure all other secondary devices to point to the new primary device

Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

Q44. An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the
managed FortiGate.
In which database will the configuration be saved?

Device-level database

Revision history database

ADOM-level database

Configuration-level database

Q45. What does a policy package status of Modified indicate?

FortiManager is unable to determine the policy package status

The policy package was never imported after a device was registered on FortiManager

The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager

The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

Q46. Refer to the exhibits.
Exhibit one.

Exhibit two.

An administrator created a new system template named Training with two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed.
What can be the main reason for these unset commands?

The DNS addresses in the default system settings are the same as the Training system template

The Training system template has other default settings

The ADOM is locked by another administrator

The Training system template does not have assigned devices

Q47. Which three settings are the factory default settings on FortiManager? (Choose three.)

Username is admin

Password is fortinet

FortiAnalyzer features are disabled

Reports and Event Monitor panes are enabled

port1 interface IP address is 192.168.1.99/24

Q48. Refer to the exhibit.

An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

The administrator logged in using the unsecure protocol HTTP, so the view is restricted.

The administrator profile does not have full access privileges like the Super_User profile.

The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.

FortiAnalyzer features are not enabled on FortiManager.

Q49. An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.
Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

When a new policy package is created, it automatically assigns the global policies to the new package.

When a new policy package is created, you need to assign the global policy package from the global
ADOM.

When a new policy package is created, you need to reapply the global policy package to the ADOM.

When a new policy package is created, you can select the option to assign the global policies to the new package.

Q50. Refer to the exhibit.

An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?

It allows FortiGate to unset central management settings.

It allows FortiGate to reboot and recover the previous configuration from its configuration file.

It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

It allows FortiGate to reboot and restore a previously working firmware image.

Q51. Refer to the following exhibit:

Which of the following statements are true based on this configuration? (Choose two.)

The same administrator can lock more than one ADOM at the same time

Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out

Unlocking an ADOM will submit configuration changes automatically to the approval administrator

Unlocking an ADOM will install configuration automatically on managed devices

Q52. View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

FortiManager updated the object ALL using FortiGate’s value in its database

FortiManager updated the object ALL using FortiManager’s value in its database

FortiManager created the object ALL as a unique entity in its database, which can be only used by this
managed FortiGate.

FortiManager installed the object ALL with the updated value.

NSE5_FMG-7.0 Dumps With 100% Verified Q&As – Pass Guarantee or Full Refund: https://www.trainingdump.com/Fortinet/NSE5_FMG-7.0-practice-exam-dumps.html

TrainingDump NSE5_FMG-7.0 Dumps PDF – 100% Passing Guarantee [Q29-Q52]