nse5_fmg-72 Exam QuestionsBrowse all questions from this exam

nse5_fmg-72 Exam - Question 11


Refer to the exhibit.

On FortiManager, an administrator created a new system template named Training with two new DNS addresses. During the installation preview stage, the administrator notices that central-management settings need to be purged.

What can be the main reason for the central-management purge command?

Show Answer
Correct Answer: AD

The correct answer is that the Training system template has a default FortiGuard widget. During the installation preview, the presence of central-management settings like the server-list indicates that it includes additional FortiGuard servers for updates and ratings. The central-management purge command is necessary to clear these pre-configured FortiGuard server settings in the system template. This ensures that the specific configurations set by the administrator are applied correctly without conflict.

Discussion

3 comments
Sign in to comment
DatBroNZOption: D
Jan 18, 2024

Correct answer is D (FortiManager 7.2 Study Guide page 363) For the Install Preview, the config system central-management -> config server-list is being purged (clear all table values). According to the FortiOS documentation, the config system central-management -> config server-list is for configuring "Additional severs that the FortiGate can use for updates (for AV, IPS, updates) and ratings (for web filter and antispam ratings) servers." In the System Templates, those additional servers are configured on the FortiGuard Widget which doesn't appear on the screenshot provided. If the config system central-management -> config server-list is being purged, that means the Training system template has a default FortiGuard widget settings.

GeniusAOption: D
Jan 31, 2024

D is the correct answer

Ahabib80Option: D
Apr 13, 2024

D is correct. By default FortiGate is preconfigured with FortiGaurd dns servers. Since the admin in the new config is changing the dns servers, the code will purge (wipe specific section) and in this scenario the whole default dns config section to be replaced with what admin configured.