NSE5_FMG-7.0 Online Practice Questions and Answers

View the following exhibit.

Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?

A. The Install On column value represents successful installation on the managed devices

B. Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

C. Policy seq#3 will be installed on the Trainer[NAT] VDOM only

D. Policy seq#3 will be not installed on any managed device

An administrator wants to delete an address object that is currently referenced in a firewall policy. What can the administrator expect to happen?

A. FortiManager will not allow the administrator to delete a referenced address object

B. FortiManager will disable the status of the referenced firewall policy

C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy

What will happen if FortiAnalyzer features are enabled on FortiManager?

A. FortiManager will reboot

B. FortiManager will send the logging configuration to the managed devices so the managed devices will start sending logs to FortiManager

C. FortiManager will enable ADOMs automatically to collect logs from non-FortiGate devices

D. FortiManager can be used only as a logging device.

An administrator would like to create an SD-WAN using central management in the Training ADOM.

To create an SD-WAN using central management, which two steps must be completed? (Choose two.)

A. Specify a gateway address when you create a default SD-WAN static route

B. Enable SD-WAN central management in the Training ADOM

C. Configure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN template settings

D. Remove all the interface references such as routes or policies that will be a part of SD-WAN member interfaces

Which two statements regarding device management on FortiManager are true? (Choose two.)

A. FortiGate devices in HA cluster devices are counted as a single device.

B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

D. The maximum number of managed devices for each ADOM is 500.

Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

A. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration

B. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices

C. The Security Fabric settings are part of the device level settings

D. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices

Refer to the exhibit.

Which two statements are true if the script is executed using the Device Database option? (Choose two.)

A. You must install these changes using the Install Wizard to a managed device

B. The successful execution of a script on the Device Database will create a new revision history

C. The script history will show successful installation of the script on the remote FortiGate

D. The Device Settings Status will be tagged as Modified

Refer to the exhibit.

Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

A. It supports the FortiManager script feature

B. It allows making configuration changes for managed devices on FortiManager panes

C. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate

D. You cannot assign the same ADOM to multiple administrators

What does a policy package status of Modified indicate?

A. FortiManager is unable to determine the policy package status

B. The policy package was never imported after a device was registered on FortiManager

C. The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager

D. The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

What does the diagnose dvm check-integrity command do? (Choose two.)

A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

B. Verifies and corrects unregistered, registered, and deleted device states

C. Verifies and corrects database schemas in all object tables

D. Verifies and corrects duplicate VDOM entries