100% Real & Accurate NSE5_FMG-7.0 Questions and Answers with Free and Fast Updates
Get Unlimited Access to NSE5_FMG-7.0 Certification Exam Cert Guide
NEW QUESTION # 25
Which two conditions trigger FortiManager to create a new revision history? (Choose two.)
- A. When changes to device-level database is made on FortiManager
- B. When configuration revision is reverted to previous revision in the revision history
- C. When FortiManager installs device-level changes to a managed device
- D. When FortiManager is auto-updated with configuration changes made directly on a managed device
Answer: C,D
NEW QUESTION # 26
An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the
managed FortiGate.
In which database will the configuration be saved?
- A. Configuration-level database
- B. Device-level database
- C. ADOM-level database
- D. Revision history database
Answer: C
Explanation:
https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942
NEW QUESTION # 27
An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?
- A. When creating a new policy package, the administrator can select the option to assign the global policy
package to the new policy package - B. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.
- C. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
- D. When a new policy package is created, the administrator needs to reapply the global policy package to
ADOM1.
Answer: B
NEW QUESTION # 28
Which two statements regarding device management on FortiManager are true? (Choose two.)
- A. The maximum number of managed devices for each ADOM is 500.
- B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.
- C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.
- D. FortiGate devices in HA cluster devices are counted as a single device.
Answer: C,D
NEW QUESTION # 29
Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?
- A. Routing
- B. Security profiles
- C. NSX-T Service Template
- D. SNMP
Answer: B
NEW QUESTION # 30
An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?
- A. FortiManager will replace the deleted address object with all address object in the referenced firewall policy
- B. FortiManager will not allow the administrator to delete a referenced address object
- C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy
- D. FortiManager will disable the status of the referenced firewall policy
Answer: C
NEW QUESTION # 31
View the following exhibit.
If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)
- A. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
- B. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on
FortiGate under central management. - C. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
- D. If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
Answer: A,C
Explanation:
Fortimanager can discover FortiGate through a NATed FortiGate IP address. If a FortiManager NATed IP address is configured on FortiGate, then FortiGate can announce itself to FortiManager. FortiManager will not attempt to re-establish the FGFM tunnel to the FortiGate NATed IP address, if the FGFM tunnel is interrupted. Just like it was in the NATed FortiManager scenario, the FortiManager NATed IP address in this scenario is not configured under FortiGate central management configuration.
NEW QUESTION # 32
View the following exhibit, which shows the Download Import Report:
Why it is failing to import firewall policy ID 2?
- A. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager
- B. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.
- C. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate
- D. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager
Answer: C
Explanation:
FortiManager_6.4_Study_Guide-Online - page 331 & 332
NEW QUESTION # 33
View the following exhibit.
An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?
- A. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
- B. 10.0.1.0/24
- C. Local-FortiGate will automatically choose an IP Network based on its network interface settings.
- D. 192.168.0.1/24
Answer: B
NEW QUESTION # 34
An administrator is replacing a device on FortiManager by running the following command:
execute device replace sn <devname> <serialnum>.
What device name and serial number must the administrator use?
- A. Device name and serial number of the original device.
- B. Device name of the replacement device and serial number of the original device.
- C. Device name of the original device and serial number of the replacement device.
- D. Device name and serial number of the replacement device.
Answer: C
NEW QUESTION # 35
An administrator is in the process of moving the system template profile between ADOMs by running the following command:
execute improfile import-profile ADOM2 3547 /tmp/myfile
Where does the administrator import the file from?
- A. ADOM2
- B. ADOM2 object database
- C. ADOM1
- D. File system
Answer: A
NEW QUESTION # 36
Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)
- A. Reverting to a previous revision history will tag the device settings status as Auto-Update.
- B. Reverting to a previous revision history will generate a new version ID and remove all other history
- C. To push these changes to a managed device, it required an install operation to the managed FortiGate.
- D. It will modify device-level database
Answer: C,D
NEW QUESTION # 37
View the following exhibit.
Which one of the following statements is true regarding the object named ALL?
- A. FortiManager updated the object ALL using FortiManager's value in its database
- B. FortiManager installed the object ALL with the updated value.
- C. FortiManager updated the object ALL using FortiGate's value in its database
- D. FortiManager created the object ALL as a unique entity in its database, which can be only used by this
managed FortiGate.
Answer: C
NEW QUESTION # 38
You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?
- A. The shared policy package will not be moved to the new ADOM
- B. Any pending device settings will be installed automatically
- C. Any unused objects from a previous ADOM are moved to the new ADOM automatically
- D. Policy packages will be imported into the new ADOM automaticallyD
Answer: A
NEW QUESTION # 39
Refer to the exhibit.
Which two statements about the output are true? (Choose two.)
- A. The latest history for the managed FortiGate does not match with the device-level database
- B. Configuration changes directly made on the FortiGate have been automatically updated to device-level
- C. The latest revision history for the managed FortiGate does match with the FortiGate running configuration
- D. Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed
Answer: A,C
Explanation:
database
Explanation:
STATUS: dev-db: modified; conf: in sync; cond: pending; dm: retrieved; conn: up - dev-db: modified - This is the device setting status which indicates that configuration changes were made on FortiManager. - conf: in sync - This is the sync status which shows that the latest revision history is in sync with Fortigate's configuration. - cond: pending - This is the configuration status which says that configuration changes need to be installed.
Most probably a retrieve was done in the past (dm: retrieved) updating the revision history DB (conf: in sync) and FortiManager device level DB, now there is a new modification on FortiManager device level DB (dev-db: modified) which wasn't installed to FortiGate (cond: pending), hence; revision history DB is not aware of that modification and doesn't match device DB.
Conclusion: - Revision DB does match FortiGate. - No changes were installed to FortiGate yet. - Device DB doesn't match Revision DB. - No changes were done on FortiGate (auto-update) but configuration was retrieved instead After an Auto-Update or Retrieve: device database = latest revision = FGT Then after a manual change on FMG end (but no install yet): latest revision = FGT (still) but now device database has been modified (is different).
After reverting to a previous revision in revision history: device database = reverted revision != FGT
NEW QUESTION # 40
Refer to the exhibit.
According to the error message why is FortiManager failing to add the FortiAnalyzer device?
- A. The administrator must use the Add Model Device section and discover the FortiAnaJyzer device
- B. The administrator must select the Forti-Manager administrative access checkbox on the FortiAnalyzer management interface
- C. The administrator must turn off the Use Legacy Device login and add the FortiAnaJyzer device to the same network as Forti-Manager
- D. The administrator must use the correct user name and password of the FortiAnalyzer device
Answer: B
NEW QUESTION # 41
......
Reliable Study Materials for NSE5_FMG-7.0 Exam Success For Sure: https://freedumps.actual4exams.com/NSE5_FMG-7.0-real-braindumps.html