NSE5_FMG-7.2 Online Practice Questions and Answers

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

A. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device

B. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

C. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

D. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

View the following exhibit, which shows theDownload Import Report:

Why it is failing to import firewall policy ID 2?

A. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate

B. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager

C. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager

D. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.

In addition to the default ADOMs, an administrator has created a new ADOM namedTrainingfor FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

A. The FortiGate will be added automatically to the default ADOM named FortiGate.

B. The FortiGate will be automatically added to the Training ADOM.

C. By default, the unregistered FortiGate will appear in the root ADOM.

D. The FortiManager administrator must add the unregistered device manually to the unregistered device manually to the Training ADOM using the Add Device wizard

What is the purpose of ADOM revisions?

A. To createSystem Checkpointsfor the FortiManager configuration.

B. To save the current state of the whole ADOM.

C. To save the current state of all policy packages and objects for an ADOM.

D. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision

Which two statements regarding device management on FortiManager are true? (Choose two.)

A. FortiGate devices in HA cluster devices are counted as a single device.

B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.

C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.

D. The maximum number of managed devices for each ADOM is 500.

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package,Fortinet, in the custom ADOM1. Which statement about the global policy package assignment to the newly-created policy packageFortinetis true?

A. When a new policy package is created, it automatically assigns the global policies to the new package.

B. When a new policy package is created, you need to assign the global policy package from the global ADOM.

C. When a new policy package is created, you need to reapply the global policy package to the ADOM.

D. When a new policy package is created, you can select the option to assign the global policies to the new package.

An administrator is replacing a failed device on FortiManager by running the following command:

execute device replace sn .

Which device name and serial number must the administrator use?

A. The device name of the new device and serial number of the failed device

B. The device name and serial number of the failed device

C. The device name of the failed device and serial number of the new device

D. The device name and serial number of the new device

What does thediagnose dvm check-integritycommand do? (Choose two.)

A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax

B. Verifies and corrects unregistered, registered, and deleted device states

C. Verifies and corrects database schemas in all object tables

D. Verifies and corrects duplicate VDOM entries