Free Fortinet NSE 5 – FortiManager 7.2 Exam NSE5_FMG-7.2 Exam Practice Test

An administrator run the reload failure command: diagnose test deploymanager reload config<deviceid> on FortiManager. What does this command do?

• It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
• It installs the latest configuration on the specified FortiGate and update the revision history database.
• It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
• It installs the provisioning template configuration on the specified FortiGate.

What will be the result of reverting to a previous revision version in the revision history?

• It will install configuration changes to managed device automatically
• It will tag the device settings status as Auto-Update
• It will generate a new version ID and remove all other revision history versions
• It will modify the device-level database

What does a policy package status of Modified indicate?

• FortiManager is unable to determine the policy package status
• The policy package was never imported after a device was registered on FortiManager
• The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager
• The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

• Managed gateways are devices managed by FortiManager in the same ADOM
• External gateways are third-party VPN gateway devices only
• Protected subnets are the subnets behind the device that you don’t want to allow access to over the IPsecVPN
• Managed devices in other ADOMs must be treated as external gateways

What is the purpose of the Policy Check feature on FortiManager?

• It provides recommendations for optimizing policies in a policy package.
• It provides recommendations to combine similar policy packages within an ADOM into one single policy package.
• It compares the policy packages with the revision history, and updates policy packages in the ADOM database.
• It merges and creates dynamic mappings for duplicate objects used in a policy package.

In the event that one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?

• The FortiManaqer HA state transition is transparent to administrators and does not require any reconfiguration.
• Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.
• Reconfigure the primary device to remove the peer IP of the failed device.
• Reboot the failed device to remove its IP from the primary device.

An administrator would like to review, approve, or reject all the firewall policy changes made by the junioradministrators.How should the Workspace mode be configured on FortiManager?

• Set to workflow and use the ADOM locking feature
• Set to read/write and use the policy locking feature
• Set to normal and use the policy locking feature
• Set to disable and use the policy locking feature

Which two statements about the scheduled backup of FortiManager are true? (Choose two.)

• It does not back up firmware images saved on FortiManager.
• It can be configured using the CLI and GUI.
• It backs up all devices and the FortiGuard database.
• It supports FTP, SCP, and SFTP.

Which of the following statements are true regarding VPN Manager? (Choose three.)

• VPN Manager must be enabled on a per ADOM basis.
• VPN Manager automatically adds newly-registered devices to a VPN community.
• VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
• Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
• VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.

What is the purpose of the Policy Check feature on FortiManager?

• To find and provide recommendation to combine multiple separate policy packages into one commonpolicy package
• To find and merge duplicate policies in the policy package
• To find and provide recommendation for optimizing policies in a policy package
• To find and delete disabled firewall policies in the policy package