Fortinet NSE5_FMG-7.2 Exam Questions

Question 6 of 63

Refer to the exhibit.
Exam NSE5_FMG-7.2: Question 6 - Image 1

How will FortiManager try to get updates for antivirus and IPS?

From the list of configured override servers or public FDN servers

From the default server fds1.fortinet.com

From the configured override server IP address 10.0.1.50 only

From public FDNI server IP address with the fourth highest octet only

Correct Answer: C

When the Server Override Mode is set to Strict, FortiManager will only try to get updates from the configured override servers. In this case, the override server IP address 10.0.1.50 is the only one listed under the CLI source type, indicating it has been manually configured. Therefore, FortiManager will get updates only from the IP address 10.0.1.50.

Question 7 of 63

Refer to the exhibit -
Exam NSE5_FMG-7.2: Question 7 - Image 1

Which two statements about the output are true? (Choose two.)

Configuration changes have been installed on FortiGate, which means the FortiGate configuration has been changed.

The latest revision history for the managed FortiGate does match the FortiGate running configuration.

Configuration changes directly made on FortiGate have been automatically updated to the device-level database.

The latest revision history for the managed FortiGate does not match the device-level database.

Correct Answer: B, D

The output indicates that the FortiGate configuration is in sync, as suggested by the 'conf: in sync' status. However, the 'dev-db: modified' and 'cond: pending' status suggest that the latest revision history for the managed FortiGate does not match the device-level database. This implies that changes have been made but are pending installation, which means the changes have not yet been applied to the FortiGate device configuration.

Question 8 of 63

Which two settings are required for FortiManager Management Extension Applications (MEA)? (Choose two.)

You must create an MEA special policy on FortiManager using the super user profile.

You must open the ports to the Fortinet registry.

When you configure MEA, you must open TCP or UDP port 540.

The administrator must have the super user profile.

Correct Answer: B, D

To enable Management Extension Applications (MEA) on FortiManager, it is necessary to ensure that the ports to the Fortinet registry are open, allowing the connection and download of MEAs. Additionally, the administrator must have the super user profile to configure and manage these settings.

Question 9 of 63

Refer to the exhibit.
Exam NSE5_FMG-7.2: Question 9 - Image 1

Given the configuration shown in the exhibit, what are two results from this configuration? (Choose two.)

Unlocking an ADOM will submit configuration changes automatically to the approval administrator.

Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.

The same administrator can lock more than one ADOM at the same time.

Unlocking an ADOM will install configuration changes automatically on managed devices.

Correct Answer: B, C

Based on the provided configuration, the workspace mode is set to normal in FortiManager. This setting means that changes are not automatically submitted or installed; instead, they need to be reviewed and installed manually. If an administrator's session is closed ungracefully, the ADOM remains locked until the session times out, ensuring the ADOM is not left in an indeterminate state. Additionally, the same administrator can lock more than one ADOM at the same time, allowing concurrent modifications across different ADOMs. Therefore, the correct answers are B and C.

Question 10 of 63

An administrator has assigned a global policy package to a new ADOM called ADOM1.
What will happen if the administrator tries to create a new policy package in ADOM1?

When a new policy package is created, the administrator must import the global policy package to ADOM1.

When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package.

Correct Answer: B

When a new policy package is created, FortiManager automatically assigns the global policy package to the new policy package. This is because the global policy package is already assigned to the ADOM, and FortiManager applies it by default to any new policy packages created within that ADOM.