NSE5_FMG-7.2 Fortinet Exam Questions and Free Practice Test

Question 7

- (Topic 3)
Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?

A. NSX-T Service Template

B. Security profiles

C. SNMP

D. Routing

Correct Answer:B

Question 8

- (Topic 1)
What are two outcomes of ADOM revisions? (Choose two.)

A. ADOM revisions can significantly increase the size of the configuration backups.

B. ADOM revisions can save the current size of the whole ADOM

C. ADOM revisions can create System Checkpoints for the FortiManager configuration

D. ADOM revisions can save the current state of all policy packages and objects for an ADOM

Correct Answer:AD
Reference:https://docs2.fortinet.com/document/fortimanager/6.0.0/best- practices/101837/adom-revisions

Question 9

- (Topic 2)
Refer to the exhibit.
NSE5_FMG-7.2 dumps exhibit
An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?

A. It allows FortiGate to unset central management settings.

B. It allows FortiGate to reboot and recover the previous configuration from its configuration file.

C. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.

D. It allows FortiGate to reboot and restore a previously working firmware image.

Correct Answer:B
Reference:https://docs.fortinet.com/document/fortimanager/6.2.0/fortigate-fortimanager-communicationsprotocol-guide/141304/fgfm-recovery-logic

Question 10

- (Topic 3)
View the following exhibit.
NSE5_FMG-7.2 dumps exhibit
Which of the following statements are true based on this configuration setting? (Choose two.)

A. This setting will enable the ADOMs feature on FortiManager.

B. This setting is applied globally to all ADOMs.

C. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.

D. This setting will allow automatic updates to the policy package configuration for a managed device.

Correct Answer:BC

Question 11

- (Topic 3)
What does thediagnose dvm check-integritycommand do? (Choose two.)

A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOMsyntax

B. Verifies and corrects unregistered, registered, and deleted device states

C. Verifies and corrects database schemas in all object tables

D. Verifies and corrects duplicate VDOM entries

Correct Answer:BD
* 6.2 Study Guide page 305verify and correct parts of the device manager databases, including:– inconsistent device-to-group and group-to-ADOM memberships– unregistered, registered, and deleted device states– device lock statuses– duplicate VDOM entries

Question 12

- (Topic 2)
An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package,Fortinet, in the custom ADOM1.
Which statement about the global policy package assignment to the newly-created policy packageFortinetis true?

A. When a new policy package is created, it automatically assigns the global policies to the new package.

B. When a new policy package is created, you need to assign the global policy package from the globalADOM.

C. When a new policy package is created, you need to reapply the global policy package to the ADOM.

D. When a new policy package is created, you can select the option to assign the global policies to the new package.

Correct Answer:A
Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).

START NSE5_FMG-7.2 EXAM