NSE5_FMG-7.2 PDF Dumps | May 09, 2025 Recently Updated Questions

NSE5_FMG-7.2 Exam Questions – Valid NSE5_FMG-7.2 Dumps Pdf

NEW QUESTION # 20
View the following exhibit.

An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

• A. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
• B. The unused objects that are not tied to the firewall policies in policy package will be deleted from the
• C. The unused objects that are not tied to the firewall policies will be installed on FortiGate
• D. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate

Answer: A

Explanation:
FortiManager database

NEW QUESTION # 21
Refer to the exhibits.
Exhibit one.

Exhibit two.

An administrator created a new system template namedTrainingwith two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed.
What can be the main reason for these unset commands?

• A. TheTrainingsystem template has other default settings
• B. TheTrainingsystem template does not have assigned devices
• C. The DNS addresses in the default system settings are the same as theTrainingsystem template
• D. The ADOM is locked by another administrator

Answer: A

NEW QUESTION # 22
Push updates are failing on a FortiGate device that is located behind a NAT device Which two settings should the administrator check? (Choose two.)

• A. That the virtual IP address and correct ports are set on the NAT device
• B. That the external IP address on the NAT device is set to DHCP and configured with the virtual IP
• C. That the override server IP address is set on FortiManager and the NAT device
• D. That the NAT device IP address and correct ports are configured on FortiManager

Answer: B,D

NEW QUESTION # 23
Which two statements about the scheduled backup of FortiManager are true? (Choose two.)

• A. It supports FTP, SCP, and SFTP.
• B. It backs up all devices and the FortiGuard database.
• C. It does not back up firmware images saved on FortiManager.
• D. It can be configured using the CLI and GUI.

Answer: A,C

Explanation:
Reference:https://docs.ansible.com/ansible/latest/collections/fortinet/fortimanager/fmgr_system_backup_allsettin

NEW QUESTION # 24
View the following exhibit.

Which of the following statements are true based on this configuration setting? (Choose two.)

• A. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.
• B. This setting will enable the ADOMs feature on FortiManager.
• C. This setting is applied globally to all ADOMs.
• D. This setting will allow automatic updates to the policy package configuration for a managed device.

Answer: A,C

NEW QUESTION # 25
Refer to the exhibit.

Given the configuration shown in the exhibit, what are two results from this configuration? (Choose two.)

• A. The same administrator can lock more than one ADOM at the same time. Most Voted
• B. Two or more administrators can make configuration changes at the same time, in the same ADOM.
• C. You can validate administrator login attempts through external servers.
• D. Concurrent read-write access to an ADOM is disabled. Most Voted

Answer: A,D

NEW QUESTION # 26
Refer to the exhibit.

A junior administrator is troubleshooting a FortiManager connectivity issue that rs occurring with managed FortiGate devices Given the FortiManager device manager settings shown in the exhibit what can you conclude from the exhibit?

• A. The administrator must refresh both devices to restore connectivity
• B. FortiManager test internet connectivity therefore, both devices appear to be down
• C. The administrator had restored the FortiManager configuration file
• D. The administrator can reclaim the FGFM tunnel to get both devices online

Answer: B

NEW QUESTION # 27
Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)

• A. Reverting to a previous revision history will generate a new versionIDand remove all other history versions.
• B. It will modify device-level database
• C. Reverting to a previous revision history will tag the device settings status asAuto-Update.
• D. To push these changes to a managed device, it required an install operation to the managed FortiGate.

Answer: B,D

NEW QUESTION # 28
Refer to the exhibit.

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM, which has four policy packages. The customer administrator has access onlytoMy_ADOM.
How can customer or service provider administrators remove both global header and footer policies from the policy package named Shared_Package?

• A. The customer administrator can unassign both global polices from My_ADOM.
• B. The service provider administrator can unassign both policies from the global ADOM.
• C. The customer administrator can unassign both polices by locking My_ADOM.
• D. The service provider administrator can unassign both global policies from My_ADOM.

Answer: D

NEW QUESTION # 29
An administrator would like to create an SD-WAN using central management in theTrainingADOM.
To create an SD-WAN using central management, which two steps must be completed? (Choose two.)

• A. Specify a gateway address when you create a default SD-WAN static route
• B. Remove all the interface references such as routes or policies that will be a part of SD-WAN member interfaces
• C. Configure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN template settings
• D. Enable SD-WAN central management in theTrainingADOM

Answer: B,D

Explanation:
Reference:https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/676493/removing-existing-configuration

NEW QUESTION # 30
An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?

• A. FortiManager will replace the deleted address object with all address object in the referenced firewall policy
• B. FortiManager will disable the status of the referenced firewall policy
• C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy
• D. FortiManager will not allow the administrator to delete a referenced address object

Answer: C

NEW QUESTION # 31
Refer to the exhibit.

An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

• A. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.
• B. FortiAnalyzer features are not enabled on FortiManager.
• C. The administrator profile does not have full access privileges like the Super_User profile.
• D. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.

Answer: B,C

NEW QUESTION # 32
Which three settings are the factory default settings on FortiManager? (Choose three.)

• A. port1 interface IP address is 192.168.1.99/24
• B. Password is fortinet
• C. Username is admin
• D. FortiAnalyzer features are disabled
• E. Reports and Event Monitor panes are enabled

Answer: A,C,D

NEW QUESTION # 33
An administrator with theSuper_Userprofile is unable to log in to FortiManager because of an authentication failure message.
Which troubleshooting step should you take to resolve the issue?

• A. Make sure ADOMs are enabled and the administrator has access to the Global ADOM
• B. Make sure FortiManager Access is enabled in the administrator profile
• C. Make sure Offline Mode is disabled
• D. Make sure the administrator IP address is part of the trusted hosts.

Answer: D

Explanation:
Even if a user entered the correct userid/password, the FMG denies access if a user is logging in from an untrusted source IP subnets.
Reference:https://docs.fortinet.com/document/fortimanager/6.0.3/administration-guide/107347/trusted-hosts

NEW QUESTION # 34
What are two outcomes of ADOM revisions? (Choose two.)

• A. ADOM revisions can significantly increase the size of the configuration backups.
• B. ADOM revisions can save the current size of the whole ADOM
• C. ADOM revisions can save the current state of all policy packages and objects for an ADOM
• D. ADOM revisions can create System Checkpoints for the FortiManager configuration

Answer: A,C

Explanation:
Reference:https://docs2.fortinet.com/document/fortimanager/6.0.0/best-practices/101837/adom-revisions

NEW QUESTION # 35
In addition to the default ADOMs, an administrator has created a new ADOM namedTrainingfor FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

• A. The FortiGate will be added automatically to the default ADOM named FortiGate.
• B. The FortiManager administrator must add the unregistered device manually to the unregistered device manually to the Training ADOM using the Add Device wizard
• C. The FortiGate will be automatically added to the Training ADOM.
• D. By default, the unregistered FortiGate will appear in the root ADOM.

Answer: D

Explanation:
Reference:https://docs.fortinet.com/document/fortimanager/7.0.0/administration-guide/718923/root-adom

NEW QUESTION # 36
In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

• A. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.
• B. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.
• C. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device
• D. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

Answer: B

Explanation:
FortiManager_6.4_Study_Guide-Online - page 346
FortiManager HA doesn't support IP takeover where an HA state transition is transparent to administrators. If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:
1. Manually reconfigure one of the secondary devices to become the primary device
2. Reconfigure all other secondary devices to point to the new primary device

NEW QUESTION # 37
In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

• A. The FortiGate will be added automatically to the default ADOM named FortiGate.
• B. The FortiGate will be automatically added to the Training ADOM.
• C. By default, the unregistered FortiGate will appear in the root ADOM.
• D. The FortiManager administrator must add the unregistered device manually to the unregistered device

Answer: C

Explanation:
manually to the Training ADOM using the Add Device wizard

NEW QUESTION # 38
What will be the result of reverting to a previous revision version in the revision history?

• A. It will modify the device-level database
• B. It will generate a new versionIDand remove all other revision history versions
• C. It will tag the device settings status asAuto-Update
• D. It will install configuration changes to managed device automatically

Answer: A

NEW QUESTION # 39
An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

• A. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.
• B. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
• C. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package
• D. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.

Answer: C

NEW QUESTION # 40
View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

• A. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.
• B. FortiManager installed the object ALL with the updated value.
• C. FortiManager updated the object ALL using FortiGate's value in its database
• D. FortiManager updated the object ALL using FortiManager's value in its database

Answer: C

NEW QUESTION # 41
Refer to the exhibit.

Which statement is true about the FortiManager ADOM policy tab based on the API request?

• A. The API command has failed when requesting policy tab permissions information.
• B. The API command has requested the policy tab permissions information only.
• C. The API command has applied to customer with ID: 200.
• D. The API command has enabled both central NAT and interface policy on the policy tab.

Answer: D

NEW QUESTION # 42
......

NSE5_FMG-7.2 dumps Sure Practice with 104 Questions: https://examboost.vce4dumps.com/NSE5_FMG-7.2-latest-dumps.html