Get The Important Preparation Guide With NSE5_FMG-7.0 Dumps [Q36-Q50] : Actual Test Materials : http://blog.actualtests4sure.com

NO.36 View the following exhibit:

An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager. What name will be used to display the firewall policy for port1?

port1 on FortiGate and WAN on FortiManager

port1 on both FortiGate and FortiManager

WAN zone on FortiGate and WAN zone on FortiManager

WAN zone on FortiGate and WAN interface on FortiManager

NO.37 An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

When creating a new policy package, the administrator can select the option to assign the global policy
package to the new policy package

When a new policy package is created, the administrator needs to reapply the global policy package to
ADOM1.

When a new policy package is created, the administrator must assign the global policy package from the global ADOM.

When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

NO.38 Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

The Security Fabric license, group name and password are required for the FortiManager Security Fabric
integration

The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices

The Security Fabric settings are part of the device level settings

The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices

NO.39 An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?

Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP’s state do not require installation.

Changes to the AP’s state must be performed directly on the managed FortiGate.

Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.

Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.

NO.40 Refer to the following exhibit:

Which of the following statements are true based on this configuration? (Choose two.)

The same administrator can lock more than one ADOM at the same time

Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out

Unlocking an ADOM will submit configuration changes automatically to the approval administrator

Unlocking an ADOM will install configuration automatically on managed devices

NO.41 An administrator’s PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.
How can the administrator unlock the ADOM?

Restore the configuration from a previous backup.

Log in as Super_User in order to unlock the ADOM.

Log in using the same administrator account to unlock the ADOM.

Delete the previous admin session manually through the FortiManager GUI or CLI.

NO.42 Which two items does an FGFM keepalive message include? (Choose two.)

FortiGate uptime

FortiGate license information

FortiGate IPS version

FortiGate configuration checksum

NO.43 Refer to the exhibit.

An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

192.168.0.1/24

10.200.1.0/24

It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.

Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.

NO.44 Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

Managed gateways are devices managed by FortiManager in the same ADOM

External gateways are third-party VPN gateway devices only

Protected subnets are the subnets behind the device that you don’t want to allow access to over the IPsec
VPN

Managed devices in other ADOMs must be treated as external gateways

NO.45 You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?

Any pending device settings will be installed automatically

Any unused objects from a previous ADOM are moved to the new ADOM automatically

The shared policy package will not be moved to the new ADOM

Policy packages will be imported into the new ADOM automaticallyD

NO.46 View the following exhibit.

Which of the following statements are true based on this configuration setting? (Choose two.)

This setting will enable the ADOMs feature on FortiManager.

This setting is applied globally to all ADOMs.

This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.

This setting will allow automatic updates to the policy package configuration for a managed device.

NO.47 An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.
What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

Trainer is not a part of workflow approval group

Trainer does not have full rights over this ADOM

Trainer must close Student’s workflow session before approving the request

Student, who submitted the workflow session, must first self-approve the request

NO.48 View the following exhibit.

If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on
FortiGate under central management.

During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

NO.49 In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device

Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

NO.50 Refer to the exhibit.

An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

192.168.0.1/24

10.200.1.0/24

It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.

Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.