NSE5_FMG-7.0 Online Practice Questions and Answers

View the following exhibit, which shows the Download Import Report: Why it is failing to import firewall policy ID 2?

A. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

B. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

C. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

D. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

View the following exhibit:

How will FortiManager try to get updates for antivirus and IPS?

A. From the list of configured override servers with ability to fall back to public FDN servers

B. From the configured override server list only

C. From the default server fdsl.fortinet.com

D. From public FDNI server with highest index number only

When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

B. FortiManager will revert and install a previous configuration revision on the managed FortiGate.

C. FortiGate will reject the CLI commands that will cause the tunnel to go down.

D. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.

An administrator run the reload failure command: diagnose test deploymanager reload config on FortiManager. What does this command do?

A. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.

B. It installs the latest configuration on the specified FortiGate and update the revision history database.

C. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.

D. It installs the provisioning template configuration on the specified FortiGate.

What will be the result of reverting to a previous revision version in the revision history?

A. It will install configuration changes to managed device automatically

B. It will tag the device settings status as Auto-Update

C. It will generate a new version ID and remove all other revision history versions

D. It will modify the device-level database

Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

A. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration

B. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices

C. The Security Fabric settings are part of the device level settings

D. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices

Which of the following statements are true regarding VPN Manager? (Choose three.)

A. VPN Manager must be enabled on a per ADOM basis.

B. VPN Manager automatically adds newly-registered devices to a VPN community.

C. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

D. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.

E. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

Refer to the exhibit.

Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?

A. FortiManager ignored the firewall service category General but created a new service category in its database.

B. FortiManager ignored the firewall service category general and deleted the duplicate value In Its database

C. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.

D. FortiManager ignored the firewall service category General and did not update Its database with the value

What does the diagnose dvm check-integrity command do? (Choose two.)

A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

B. Verifies and corrects unregistered, registered, and deleted device states

C. Verifies and corrects database schemas in all object tables

D. Verifies and corrects duplicate VDOM entries

View the following exhibit.

Which of the following statements are true based on this configuration setting? (Choose two.)

A. This setting will enable the ADOMs feature on FortiManager.

B. This setting is applied globally to all ADOMs.

C. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.

D. This setting will allow automatic updates to the policy package configuration for a managed device.