Download Fortinet NSE5_FMG-7.0 Exam Dumps to Pass Exam Easily in 2023
Get 100% Real Free NSE 5 Network Security Analyst NSE5_FMG-7.0 Sample Questions
Fortinet NSE5_FMG-7.0 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION 17
An administrator has enabled Service Access on FortiManager.
What is the purpose of Service Access on the FortiManager interface?
- A. Allows FortiManager to respond to request for FortiGuard services from FortiGate devices
- B. Allows FortiManager to automatically configure a default route
- C. Allows FortiManager to run real-time debugs on the managed devices
- D. Allows FortiManager to download IPS packages
Answer: A
NEW QUESTION 18
An administrator run the reload failure command: diagnose test deploymanager reload config
<deviceid> on FortiManager. What does this command do?
- A. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
- B. It installs the latest configuration on the specified FortiGate and update the revision history database.
- C. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
- D. It installs the provisioning template configuration on the specified FortiGate.
Answer: C
NEW QUESTION 19
An administrator is replacing a device on FortiManager by running the following command:
execute device replace sn <devname> <serialnum>.
What device name and serial number must the administrator use?
- A. Device name and serial number of the replacement device.
- B. Device name of the replacement device and serial number of the original device.
- C. Device name and serial number of the original device.
- D. Device name of the original device and serial number of the replacement device.
Answer: D
NEW QUESTION 20
Which two items are included in the FortiManager backup? (Choose two.)
- A. All devices
- B. Global database
- C. Logs
- D. FortiGuard database
Answer: A,B
NEW QUESTION 21
When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?
- A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
- B. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
- C. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.
- D. FortiGate will reject the CLI commands that will cause the tunnel to go down.
Answer: A
Explanation:
The configuration change will break the fgfm connection, causing the FortiGate unit to attempt to reconnect for 900 seconds. If the FortiGate cannot reconnect, it will rollback to its previous configuration.
NEW QUESTION 22
View the following exhibit.
Which one of the following statements is true regarding the object named ALL?
- A. FortiManager updated the object ALL using FortiGate's value in its database
- B. FortiManager updated the object ALL using FortiManager's value in its database
- C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.
- D. FortiManager installed the object ALL with the updated value.
Answer: A
NEW QUESTION 23
An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.
Which interface must the administrator select in the static route device drop-down list?
- A. port2
- B. virtual-wan-link
- C. auto-discovery
- D. port1
Answer: B
NEW QUESTION 24
Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?
- A. Routing
- B. NSX-T Service Template
- C. Security profiles
- D. SNMP
Answer: C
NEW QUESTION 25
What will happen if FortiAnalyzer features are enabled on FortiManager?
- A. FortiManager will keep all the logs and reports on the FortiManager.
- B. FortiManager can be used only as a logging device.
- C. FortiManager will install the logging configuration to the managed devices
- D. FortiManager will enable ADOMs to collect logs automatically from non-FortiGate devices.
Answer: C
NEW QUESTION 26
Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)
- A. Reverting to a previous revision history will tag the device settings status as Auto-Update.
- B. Reverting to a previous revision history will generate a new version ID and remove all other history
- C. It will modify device-level database
- D. To push these changes to a managed device, it required an install operation to the managed FortiGate.
Answer: C,D
NEW QUESTION 27
When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?
- A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
- B. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
- C. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.
- D. FortiGate will reject the CLI commands that will cause the tunnel to go down.
Answer: A
NEW QUESTION 28
What will happen if FortiAnalyzer features are enabled on FortiManager?
- A. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices
- B. FortiManager will reboot
- C. FortiManager can be used only as a logging device.
- D. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager
Answer: B
NEW QUESTION 29
Refer to the exhibit.
An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)
- A. The administrator profile does not have full access privileges like the Super_User profile.
- B. FortiAnalyzer features are not enabled on FortiManager.
- C. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.
- D. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.
Answer: A,B
NEW QUESTION 30
View the following exhibit.
When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)
- A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
- B. Provides the option to preview configuration changes prior to installing them
- C. Installs device-level changes to FortiGate without launching the Install Wizard
- D. Will not create new revision in the revision history
Answer: A,C
NEW QUESTION 31
Which of the following statements are true regarding VPN Manager? (Choose three.)
- A. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
- B. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.
- C. VPN Manager automatically adds newly-registered devices to a VPN community.
- D. VPN Manager must be enabled on a per ADOM basis.
- E. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
Answer: A,D,E
NEW QUESTION 32
What does a policy package status of Conflict indicate?
- A. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.
- B. The policy configuration has never been imported after a device was registered on FortiManager.
- C. The policy package does not have a FortiGate as the installation target.
- D. The policy package configuration has been changed on both FortiManager and the managed device
independently.
Answer: D
NEW QUESTION 33
View the following exhibit.
What is the purpose of setting ADOM Mode to Advanced?
- A. The setting enables the ADOMs feature on FortiManager
- B. The setting disables concurrent ADOM access and adds ADOM locking
- C. The setting allows automatic updates to the policy package configuration for a managed device
- D. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.
Answer: D
NEW QUESTION 34
View the following exhibit:
An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager. What name will be used to display the firewall policy for port1?
- A. WAN zone on FortiGate and WAN interface on FortiManager
- B. port1 on both FortiGate and FortiManager
- C. WAN zone on FortiGate and WAN zone on FortiManager
- D. port1 on FortiGate and WAN on FortiManager
Answer: D
NEW QUESTION 35
An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?
- A. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy
- B. FortiManager will not allow the administrator to delete a referenced address object
- C. FortiManager will replace the deleted address object with all address object in the referenced firewall policy
- D. FortiManager will disable the status of the referenced firewall policy
Answer: A
NEW QUESTION 36
When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?
- A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
- B. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.
- C. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
- D. FortiGate will reject the CLI commands that will cause the tunnel to go down.
Answer: C
Explanation:
The configuration change will break the fgfm connection, causing the FortiGate unit to attempt to reconnect for 900 seconds. If the FortiGate cannot reconnect, it will rollback to its previous configuration.
NEW QUESTION 37
An administrator has added all the devices in a Security Fabric group to FortiManager.
How does the administrator identify the root FortiGate?
- A. By an at symbol (@) at the end of the device name
- B. By an Asterisk (*) at the end of the device name
- C. By a Question:
- D. By a dollar symbol ($) at the end of the device name
Answer: B
NEW QUESTION 38
Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)
- A. The Security Fabric license, group name and password are required for the FortiManager Security Fabric
integration - B. The Security Fabric settings are part of the device level settings
- C. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices
- D. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices
Answer: B,D
NEW QUESTION 39
An administrator run the reload failure command: diagnose test deploymanager reload config
<deviceid> on FortiManager. What does this command do?
- A. It installs the latest configuration on the specified FortiGate and update the revision history database.
- B. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
- C. It compares and provides differences in configuration on FortiManager with the current running
configuration of the specified FortiGate. - D. It installs the provisioning template configuration on the specified FortiGate.
Answer: B
NEW QUESTION 40
......
NSE5_FMG-7.0 Study Guide Realistic Verified Dumps: https://www.test4engine.com/NSE5_FMG-7.0_exam-latest-braindumps.html
Accurate NSE5_FMG-7.0 Questions with Free and Fast Updates: https://drive.google.com/open?id=1aLpW18Q6VtWkgH5lVB5EUigi1k-Logp5