NSE5_FMG-7.0 Online Practice Questions and Answers

Which two items does an FGFM keepalive message include? (Choose two.)

A. FortiGate uptime

B. FortiGate license information

C. FortiGate IPS version

D. FortiGate configuration checksum

Refer to the exhibit.

Which statement about the object named ALL is true?

A. FortiManager updated the object ALL using the FortiGate value in its database.

B. FortiManager installed the object ALL with the updated value.

C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.

D. FortiManager updated the object ALL using the FortiManager value in its database.

View the following exhibit.

Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?

A. The Install On column value represents successful installation on the managed devices

B. Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets

C. Policy seq#3 will be installed on the Trainer[NAT] VDOM only

D. Policy seq#3 will be not installed on any managed device

View the following exhibit.

An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

A. The unused objects that are not tied to the firewall policies will be installed on FortiGate

B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate

C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database

Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

A. When configuration revision is reverted to previous revision in the revision history

B. When FortiManager installs device-level changes to a managed device

C. When FortiManager is auto-updated with configuration changes made directly on a managed device

D. When changes to device-level database is made on FortiManager

View the following exhibit.

What is the purpose of setting ADOM Mode to Advanced?

A. The setting allows automatic updates to the policy package configuration for a managed device

B. The setting enables the ADOMs feature on FortiManager

C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.

D. The setting disables concurrent ADOM access and adds ADOM locking

Refer to the exhibit.

You are using the Quick Install option to install configuration changes on the managed FortiGate. Which two statements correctly describe the result? (Choose two.)

A. It will not create a new revision in the revision history

B. It installs device-level changes to FortiGate without launching the Install Wizard

C. It cannot be canceled once initiated and changes will be installed on the managed device

D. It provides the option to preview configuration changes prior to installing them

Refer to the exhibits. Exhibit one.

Exhibit two.

An administrator created a new system template named Training with two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed. What can be the main reason for these unset commands?

A. The DNS addresses in the default system settings are the same as the Training system template

B. The Training system template has other default settings

C. The ADOM is locked by another administrator

D. The Training system template does not have assigned devices

Which two statements regarding device management on FortiManager are true? (Choose two.)

A. FortiGate devices in HA cluster devices are counted as a single device.

B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

D. The maximum number of managed devices for each ADOM is 500.

Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

A. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration

B. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices

C. The Security Fabric settings are part of the device level settings

D. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices

Refer to the exhibit.

Which two statements are true if the script is executed using the Device Database option? (Choose two.)

A. You must install these changes using the Install Wizard to a managed device

B. The successful execution of a script on the Device Database will create a new revision history

C. The script history will show successful installation of the script on the remote FortiGate

D. The Device Settings Status will be tagged as Modified

Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

A. It allows two or more administrators to make configuration changes at the same time, in the same ADOM.

B. It disables concurrent read-write access to an ADOM.

C. It allows the same administrator to lock more than one ADOM at the same time.

D. It is used to validate administrator login attempts through external servers.

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1. Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?

A. When a new policy package is created, it automatically assigns the global policies to the new package.

B. When a new policy package is created, you need to assign the global policy package from the global ADOM.

C. When a new policy package is created, you need to reapply the global policy package to the ADOM.

D. When a new policy package is created, you can select the option to assign the global policies to the new package.

Refer to the exhibit.

Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

A. It supports the FortiManager script feature

B. It allows making configuration changes for managed devices on FortiManager panes

C. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate

D. You cannot assign the same ADOM to multiple administrators

What does the diagnose dvm check-integrity command do? (Choose two.)

A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

B. Verifies and corrects unregistered, registered, and deleted device states

C. Verifies and corrects database schemas in all object tables

D. Verifies and corrects duplicate VDOM entries