nse5_fmg-72

Here you have the best Fortinet nse5_fmg-72 practice exam questions

You have 63 total questions to study from
Each page has 5 questions, making a total of 13 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on November 24, 2024

Question 1 of 63

You are moving managed FortiGate devices from one ADOM to a new ADOM.

Which statement correctly describes the expected result?

The shared device settings will be installed automatically.

Any unused objects from a previous ADOM are moved to the new ADOM automatically.

The shared policy package will not be moved to the new ADOM.

Policy packages will be imported into the new ADOM automatically.

Correct Answer: C

When moving managed FortiGate devices from one ADOM to another, the shared policy package will not be moved to the new ADOM. You will need to import policy packages from the managed devices into the new ADOM.

Question 2 of 63

An administrator enabled workspace mode and now wants to delete an address object that is currently referenced in a firewall policy.

Which two results can the administrator expect to happen? (Choose two.)

FortiManager will temporarily change the status of the referenced firewall policy.

FortiManager will disable the status of the address object.

FortiManager will replace the deleted address object with the none address object in the referenced firewall policy.

FortiManager will not allow the administrator to delete a referenced address object until the ADOM is locked.

Correct Answer: C, D

When an administrator attempts to delete an address object that is currently referenced in a firewall policy on FortiManager with workspace mode enabled, two outcomes are expected. First, FortiManager will replace the deleted address object with the 'none' address object in the referenced firewall policy, effectively making the policy invalid or null. Second, FortiManager will not allow the deletion of a referenced address object unless the ADOM (Administrative Domain) is locked, as objects cannot be modified or deleted without locking the ADOM to ensure consistency and prevent conflicting changes.

Question 3 of 63

An administrator runs the Policy Check feature on FortiManager ADOM.

What will be the result?

It will find and provide recommendations to combine multiple separate policy packages into one common policy package.

It will find and merge duplicate policies in the policy package.

It will find and provide recommendations for optimizing policies in a policy package.

It will find and delete disabled firewall policies in the policy package.

Correct Answer: C

Running the Policy Check feature in FortiManager ADOM will find and provide recommendations for optimizing policies in a policy package. This involves evaluating policies for potential issues like duplication, shadowing, overlap, and orphaning, and suggesting improvements based on these criteria.

Question 4 of 63

An administrator created a header and footer global policy package and assigned it to an ADOM.

What are two outcomes from this action? (Choose two.)

You must manually move the header and footer policies after the policy assignment.

After you assign the global policy package to an ADOM, the policy package is hidden from the ADOM and cannot be viewed.

If you assign an additional global policy package to the same ADOM, FortiManager removes previously assigned policies.

You can edit or delete all the global objects in the global ADOM.

Correct Answer: C, D

Assigning an additional global policy package to the same ADOM results in FortiManager removing or replacing previously assigned policies to maintain consistency. Additionally, after assigning a global policy package to an ADOM, you can edit or delete all the global objects within the global ADOM.

Question 5 of 63

An administrator is replacing a failed device on FortiManager by running the following command: execute device replace sn .

Which device name and serial number must the administrator use?

The device name of the new device and serial number of the failed device

The device name and serial number of the failed device

The device name of the failed device and serial number of the new device

The device name and serial number of the new device

Correct Answer: C

When replacing a failed device in FortiManager, the administrator must use the device name of the failed device and the serial number of the new device. This ensures that FortiManager correctly updates its records to reflect the replacement. The command instructs FortiManager to associate the existing device entry with the new hardware by changing only the serial number part of the device's entry, preserving the original device name.