Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Fortinet NSE5_FMG-7.2

Fortinet NSE5_FMG-7.2 Exam Practice Questions (P. 5)

  • Full Access (63 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #21
Refer to the exhibit.

Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?
  1. A
    FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.
  2. B
    FortiManager ignored the firewall service category General and did not update its database with the value.
  3. C
    FortiManager ignored the firewall service category General but created a new service category in its database.
  4. D
    FortiManager ignored the firewall service category General and deleted the duplicate value in its database.

Correct Answer:
B

Question #22
An administrator is in the process of moving the system template profile between ADOMs by running the following command: execute fmprofile import-profile ADOM2 3547 /tmp/myfile
Where does the administrator import the file from?
  1. A
    File system
  2. B
    ADOM1
  3. C
    ADOM2 object database
  4. D
    ADOM2

Correct Answer:
A
chatbot-img GPT-4o - Answer
Absolutely, the correct choice is the file system. Here's the scoop: when you hit up the command `execute fmprofile import-profile`, you're specifying a whole path, right? That `/tmp/myfile` bit means you're pulling the profile directly from the FortiManager's file system. No tricks here; it's pretty direct and about as straightforward as it gets in terms of where you're sourcing your file from when moving stuff between ADOMs. Just ensure that path is spot on!

Question #23
What does a policy package status of Never Installed indicate?
  1. A
    The policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager.
  2. B
    FortiManager is unable to determine the policy package status.
  3. C
    The policy configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
  4. D
    The policy package was never imported after a device was registered on FortiManager.

Correct Answer:
D
chatbot-img GPT-4o - Answer
When a policy package status shows "Never Installed," it means that either no policy package has been assigned to the unit or policies and objects have yet to be imported after device registration. Thus, there's no existing configuration to install from FortiManager onto the managed device. Ensure that every new device is properly set up with an assigned policy package or properly imported to avoid this status.

Question #24
Refer to the exhibit.

If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)
  1. A
    During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
  2. B
    If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
  3. C
    FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
  4. D
    FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.

Correct Answer:
AB

Question #25
When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?
  1. A
    FortiGate will reject the CLI commands that will cause the tunnel to go down.
  2. B
    FortiManager will revert and install a previous configuration revision on the managed FortiGate.
  3. C
    FortiManager will not push the CLI commands as part of the installation that will cause the tunnel to go down.
  4. D
    After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

Correct Answer:
D
chatbot-img GPT-4o - Answer
In the context of the recovery logic used between FortiManager and FortiGate for an FGFM tunnel, it's crucial to understand that if FortiGate detects an issue where the installation of new CLI commands disrupts the tunnel, it automatically initiates a recovery process. This process involves waiting for a period of 15 minutes to check if the connection can be reestablished. If it cannot, FortiGate employs the unset command on the new changes. This automatic mechanism, detailed in the FortiManager diagnostic manual, ensures network stability by potentially reverting to prior configurations if necessary. Furthermore, the appliance's ability to reboot under specific conditions enhances recovery prospects. This serves as an essential safeguard, keeping communications intact between FortiManager and FortiGate.

Previous Questions Next Questions

All Pages