Question 1

An administrator is in the process of moving the system template profile between ADOMs by running the following command:

execute improfile import-profile ADOM2 3547 /tmp/myfile

Where does the administrator import the file from?

AFile system

BADOM1

CADOM2 object database

DADOM2

Answer : D

Question 2

An administrator is replacing a failed device on FortiManager by running the following command:

execute device replace sn .

Which device name and serial number must the administrator use?

AThe device name of the new device and serial number of the failed device

BThe device name and serial number of the failed device

CThe device name of the failed device and serial number of the new device

DThe device name and serial number of the new device

Answer : C

To replace the faulty device with the new device, take the following steps:

1. Note the device name of the original FortiGate.

If the replacement device is already listed as unregistered, then you will need to delete it from the

unregistered device list in the root ADOM.

2. Add the serial number of the replacement FortiGate.

After the replace command is executed, FortiManager updates the serial number in its database.

3. Verify that the new device serial number is associated with the faulty device in FortiManager.

You can do this using the CLI or the System Information widget of FortiGate.

4. Send a request from the replacement device to register it with FortiManager

Reference [Page 283] - https://ebin.pub/fortinet-fortimanager-study-guide-for-fortimanager-72.html

Question 3

Refer to the exhibit.

How will FortiManager try to get updates for antivirus and IPS?

AFrom the list of configured override servers or public FDN servers

BFrom the default server fds1.fortinet.com

CFrom the configured override server IP address 10.0.1.50 only

DFrom public FDNI server IP address with the fourth highest octet only

Answer : C

FortiManager tries to obtain updates from the servers configured in the Use Override Server Address for FortiGate/FortiMail section. Depending on the Server Override Mode configuration, you can restrict FortiManager to receiving updates from the configured override servers list, or allowing fallback to other public FDS servers, if FortiManager is not able to communicate and receive updates from the configured server list. In the example shown on this slide, two override server addresses are configured. When Server Override Mode is set to Strict, FortiManager gets updates only from these two servers. There is no fallback to other public servers, if these two configured servers are not available. If you set Server Override Mode to Loose, FortiManager first tries to get updates from the configured server list; if they are unavailable, FortiManager falls back to other public FDS servers to get updates. Reference [Page 357] - https://ebin.pub/fortinet-fortimanager-study-guide-for-fortimanager-72.html

Question 4

Refer to the exhibit.

In the event that the monitored interface for the primary FortiManager device fails, which statement is true about FortiManager HA?

AManually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.

BReboot the failed device to remove its IP from the primary device.

CReconfigure the primary device lo remove the peer IP of the failed device.

DThe FortiManager HAfailover is transparent to administrators and does not require any reconfiguration.

Answer : D

Select VRRP to configure automatic failover. When the monitored interface for the primary FortiManager is unreachable or down, HA automatic failover will occur, and the secondary FortiManager will automatically become the primary.

Question 5

Refer to the exhibit showing a Download Import Report.

Why is it failing to import firewall policy ID 1?

APolicy ID 1 is configured from the interface any to port6. FortiManager rejects the request to import this policy because the any interface does not exist on FortiManager.

BThe address object used in policy ID 1 already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.

CPolicy ID 1 does not have the ADOM Interface mapping configured on FortiManager.

DPolicy ID 1 for this managed FortiGate already exists on FortiManager in the policy package named Remote-FortiGate.

Answer : B

Free Practice Questions for Fortinet NSE5_FMG-7.2 Exam

Question 1

Question 2

Question 3

Question 4

Question 5