Apr-2023 Fortinet NSE5_FMG-7.0 Certification Real 2023 Mock Exam
NSE5_FMG-7.0 Exam Questions and Valid PMP Dumps PDF
NEW QUESTION 41
Refer to the exhibit.
An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?
- A. 192.168.0.1/24
- B. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.
- C. It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.
- D. 10.200.1.0/24
Answer: A
NEW QUESTION 42
What does the diagnose dvm check-integrity command do? (Choose two.)
- A. Verifies and corrects duplicate VDOM entries
- B. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax
- C. Verifies and corrects unregistered, registered, and deleted device states
- D. Verifies and corrects database schemas in all object tables
Answer: A,C
Explanation:
6.2 Study Guide page 305 verify and correct parts of the device manager databases, including: - inconsistent device-to-group and group-to-ADOM memberships - unregistered, registered, and deleted device states - device lock statuses - duplicate VDOM entries
NEW QUESTION 43
An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.
Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?
- A. When a new policy package is created, you need to assign the global policy package from the global ADOM.
- B. When a new policy package is created, it automatically assigns the global policies to the new package.
- C. When a new policy package is created, you need to reapply the global policy package to the ADOM.
- D. When a new policy package is created, you can select the option to assign the global policies to the new package.
Answer: B
Explanation:
Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).
NEW QUESTION 44
Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)
- A. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration
- B. The Security Fabric settings are part of the device level settings
- C. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices
- D. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices
Answer: B,C
NEW QUESTION 45
Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?
- A. SNMP
- B. Security profiles
- C. NSX-T Service Template
- D. Routing
Answer: D
NEW QUESTION 46
What are two outcomes of ADOM revisions? (Choose two.)
- A. ADOM revisions can save the current size of the whole ADOM
- B. ADOM revisions can significantly increase the size of the configuration backups.
- C. ADOM revisions can save the current state of all policy packages and objects for an ADOM
- D. ADOM revisions can create System Checkpoints for the FortiManager configuration
Answer: B,C
NEW QUESTION 47
View the following exhibit.
What is the purpose of setting ADOM Mode to Advanced?
- A. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.
- B. The setting disables concurrent ADOM access and adds ADOM locking
- C. The setting enables the ADOMs feature on FortiManager
- D. The setting allows automatic updates to the policy package configuration for a managed device
Answer: A
NEW QUESTION 48
An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.
Which troubleshooting step should you take to resolve the issue?
- A. Make sure FortiManager Access is enabled in the administrator profile
- B. Make sure Offline Mode is disabled
- C. Make sure the administrator IP address is part of the trusted hosts.
- D. Make sure ADOMs are enabled and the administrator has access to the Global ADOM
Answer: C
Explanation:
Even if a user entered the correct userid/password, the FMG denies access if a user is logging in from an untrusted source IP subnets.
NEW QUESTION 49
You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?
- A. The shared policy package will not be moved to the new ADOM
- B. Policy packages will be imported into the new ADOM automaticallyD
- C. Any unused objects from a previous ADOM are moved to the new ADOM automatically
- D. Any pending device settings will be installed automatically
Answer: A
NEW QUESTION 50
Refer to the exhibit.
Which two statements are true if the script is executed using the Device Database option? (Choose two.)
- A. The successful execution of a script on the Device Database will create a new revision history
- B. You must install these changes using the Install Wizard to a managed device
- C. The script history will show successful installation of the script on the remote FortiGate
- D. The Device Settings Status will be tagged as Modified
Answer: B,D
NEW QUESTION 51
An administrator run the reload failure command: diagnose test deploymanager reload config
<deviceid> on FortiManager. What does this command do?
- A. It installs the provisioning template configuration on the specified FortiGate.
- B. It compares and provides differences in configuration on FortiManager with the current running
configuration of the specified FortiGate. - C. It installs the latest configuration on the specified FortiGate and update the revision history database.
- D. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
Answer: D
NEW QUESTION 52
Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)
- A. The Security Fabric settings are part of the device level settings
- B. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices
- C. The Security Fabric license, group name and password are required for the FortiManager Security Fabric
integration - D. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices
Answer: A,B
NEW QUESTION 53
View the following exhibit, which shows the Download Import Report:
Why it is failing to import firewall policy ID 2?
- A. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager
- B. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate
- C. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.
- D. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager
Answer: B
Explanation:
FortiManager_6.4_Study_Guide-Online - page 331 & 332
NEW QUESTION 54
An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.
Which troubleshooting step should you take to resolve the issue?
- A. Make sure FortiManager Access is enabled in the administrator profile
- B. Make sure Offline Mode is disabled
- C. Make sure the administrator IP address is part of the trusted hosts.
- D. Make sure ADOMs are enabled and the administrator has access to the Global ADOM
Answer: C
Explanation:
Even if a user entered the correct userid/password, the FMG denies access if a user is logging in from an untrusted source IP subnets.
Topic 1, Main Questions Pool B
NEW QUESTION 55
Refer to the exhibit.
Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?
- A. FortiManager ignored the firewall service category general and deleted the duplicate value In Its database
- B. FortiManager ignored the firewall service category General but created a new service category in its database.
- C. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.
- D. FortiManager ignored the firewall service category General and did not update Its database with the value
Answer: C
NEW QUESTION 56
In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?
- A. The FortiGate will be automatically added to the Training ADOM.
- B. By default, the unregistered FortiGate will appear in the root ADOM.
- C. The FortiManager administrator must add the unregistered device manually to the unregistered device
- D. The FortiGate will be added automatically to the default ADOM named FortiGate.
Answer: B
Explanation:
manually to the Training ADOM using the Add Device wizard
NEW QUESTION 57
Which of the following statements are true regarding VPN Manager? (Choose three.)
- A. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.
- B. VPN Manager automatically adds newly-registered devices to a VPN community.
- C. VPN Manager must be enabled on a per ADOM basis.
- D. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
- E. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
Answer: C,D,E
NEW QUESTION 58
View the following exhibit.
Which of the following statements are true based on this configuration setting? (Choose two.)
- A. This setting will enable the ADOMs feature on FortiManager.
- B. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.
- C. This setting is applied globally to all ADOMs.
- D. This setting will allow automatic updates to the policy package configuration for a managed device.
Answer: B,C
NEW QUESTION 59
Which two items does an FGFM keepalive message include? (Choose two.)
- A. FortiGate uptime
- B. FortiGate license information
- C. FortiGate IPS version
- D. FortiGate configuration checksum
Answer: C,D
NEW QUESTION 60
Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?
- A. Security profiles
- B. Routing
- C. SNMP
- D. NSX-T Service Template
Answer: A
NEW QUESTION 61
What is the purpose of ADOM revisions?
- A. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision
- B. To save the current state of all policy packages and objects for an ADOM.
- C. To save the current state of the whole ADOM.
- D. To create System Checkpoints for the FortiManager configuration.
Answer: B
Explanation:
Fortimanager 6.4 Study guide page 198
NEW QUESTION 62
......
NSE5_FMG-7.0 Question Bank: Free PDF Download Recently Updated Questions: https://www.test4engine.com/NSE5_FMG-7.0_exam-latest-braindumps.html
NSE5_FMG-7.0 Brain Dump: A Study Guide with Tips & Tricks for passing Exam: https://drive.google.com/open?id=1UEgXPvg-Q2MzG3RguxBNGVeiKzJOCwYx