[UPDATED 2023] NSE5_FMG-7.0 dumps Free Test Engine Verified By Certified Experts [Q40-Q61]

Rate this post

[UPDATED 2023] NSE5_FMG-7.0 dumps Free Test Engine Verified By Certified Experts

Realistic NSE5_FMG-7.0 Accurate & Verified Answers As Experienced in the Actual Test!

Fortinet NSE5_FMG-7.0 certification exam is designed to test the practical knowledge of individuals in managing and administering FortiManager 7.0. NSE5_FMG-7.0 exam is a hands-on exam that requires individuals to demonstrate their ability to manage and administer FortiManager 7.0 in a real-world environment. NSE5_FMG-7.0 exam is designed to test the practical skills of individuals in managing and administering FortiManager 7.0.

QUESTION 40
In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

The FortiGate will be added automatically to the default ADOM named FortiGate.

The FortiGate will be automatically added to the Training ADOM.

By default, the unregistered FortiGate will appear in the root ADOM.

The FortiManager administrator must add the unregistered device manually to the unregistered device

QUESTION 41
Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

It allows two or more administrators to make configuration changes at the same time, in the same ADOM.

It disables concurrent read-write access to an ADOM.

It allows the same administrator to lock more than one ADOM at the same time.

It is used to validate administrator login attempts through external servers.

QUESTION 42
An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?

FortiManager will not allow the administrator to delete a referenced address object

FortiManager will disable the status of the referenced firewall policy

FortiManager will replace the deleted address object with the none address object in the referenced
firewall policy

FortiManager will replace the deleted address object with all address object in the referenced firewall policy

QUESTION 43
Refer to the exhibit.

Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?

FortiManager ignored the firewall service category General but created a new service category in its database.

FortiManager ignored the firewall service category general and deleted the duplicate value In Its database

FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.

FortiManager ignored the firewall service category General and did not update Its database with the value

QUESTION 44
What does the diagnose dvm check-integrity command do? (Choose two.)

Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

Verifies and corrects unregistered, registered, and deleted device states

Verifies and corrects database schemas in all object tables

Verifies and corrects duplicate VDOM entries

QUESTION 45
An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the
managed FortiGate.
In which database will the configuration be saved?

Device-level database

Revision history database

ADOM-level database

Configuration-level database

QUESTION 46
Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration

The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices

The Security Fabric settings are part of the device level settings

The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices

QUESTION 47
View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

FortiManager updated the object ALL using FortiGate’s value in its database

FortiManager updated the object ALL using FortiManager’s value in its database

FortiManager created the object ALL as a unique entity in its database, which can be only used by this
managed FortiGate.

FortiManager installed the object ALL with the updated value.

QUESTION 48
Which two settings are required for FortiManager Management Extension Applications (MEA)? (Choose two.)

When you configure MEA, you must open TCP or UDP port 540.

You must open the ports to the Fortinet registry

You must create a MEA special policy on FortiManager using the super user profile

The administrator must have the super user profile.

QUESTION 49
What is the purpose of the Policy Check feature on FortiManager?

To find and provide recommendation to combine multiple separate policy packages into one common
policy package

To find and merge duplicate policies in the policy package

To find and provide recommendation for optimizing policies in a policy package

To find and delete disabled firewall policies in the policy package

QUESTION 50
Which two items does an FGFM keepalive message include? (Choose two.)

FortiGate uptime

FortiGate license information

FortiGate IPS version

FortiGate configuration checksum

QUESTION 51
What does a policy package status of Conflict indicate?

The policy package reports inconsistencies and conflicts during a Policy Consistency Check.

The policy package does not have a FortiGate as the installation target.

The policy package configuration has been changed on both FortiManager and the managed device independently.

The policy configuration has never been imported after a device was registered on FortiManager.

QUESTION 52
Which of the following statements are true regarding VPN Manager? (Choose three.)

VPN Manager must be enabled on a per ADOM basis.

VPN Manager automatically adds newly-registered devices to a VPN community.

VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.

Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.

VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

QUESTION 53
Refer to the exhibit.

An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?

It allows FortiGate to unset central management settings.

It allows FortiGate to reboot and recover the previous configuration from its configuration file.

It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

It allows FortiGate to reboot and restore a previously working firmware image.

QUESTION 54
An administrator would like to create an SD-WAN using central management in the Training ADOM.
To create an SD-WAN using central management, which two steps must be completed? (Choose two.)

Specify a gateway address when you create a default SD-WAN static route

Enable SD-WAN central management in the Training ADOM

Configure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN template settings

Remove all the interface references such as routes or policies that will be a part of SD-WAN member interfaces

QUESTION 55
An administrator would like to review, approve, or reject all the firewall policy changes made by the junior
administrators.
How should the Workspace mode be configured on FortiManager?

Set to workflow and use the ADOM locking feature

Set to read/write and use the policy locking feature

Set to normal and use the policy locking feature

Set to disable and use the policy locking feature

QUESTION 56
An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package

When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.

When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

QUESTION 57
An administrator has enabled Service Access on FortiManager.
What is the purpose of Service Access on the FortiManager interface?

Allows FortiManager to download IPS packages

Allows FortiManager to respond to request for FortiGuard services from FortiGate devices

Allows FortiManager to run real-time debugs on the managed devices

Allows FortiManager to automatically configure a default route

QUESTION 58
An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.
Which troubleshooting step should you take to resolve the issue?

Make sure FortiManager Access is enabled in the administrator profile

Make sure Offline Mode is disabled

Make sure the administrator IP address is part of the trusted hosts.

Make sure ADOMs are enabled and the administrator has access to the Global ADOM

QUESTION 59
Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

Managed gateways are devices managed by FortiManager in the same ADOM

External gateways are third-party VPN gateway devices only

Protected subnets are the subnets behind the device that you don’t want to allow access to over the IPsec VPN

Managed devices in other ADOMs must be treated as external gateways

QUESTION 60
Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

Managed gateways are devices managed by FortiManager in the same ADOM

External gateways are third-party VPN gateway devices only

Protected subnets are the subnets behind the device that you don’t want to allow access to over the IPsec
VPN

Managed devices in other ADOMs must be treated as external gateways

QUESTION 61
Which two statements regarding device management on FortiManager are true? (Choose two.)

FortiGate devices in HA cluster devices are counted as a single device.

FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

The maximum number of managed devices for each ADOM is 500.

Fortinet NSE5_FMG-7.0 certification is highly valued by employers as it demonstrates that the holder has a deep understanding of Fortinet security solutions and is capable of managing and configuring complex security environments. Holding this certification can lead to career advancement opportunities and higher salaries.

Latest Fortinet NSE5_FMG-7.0 Practice Test Questions: https://www.pdf4test.com/NSE5_FMG-7.0-dump-torrent.html

Free certification test prep

Leave a Reply Cancel reply