Fortinet NSE5_FMG-7.2練習テストPDF試験材料 [Q55-Q73]

Share

Fortinet NSE5_FMG-7.2練習テストPDF試験材料

NSE5_FMG-7.2解答NSE5_FMG-7.2無料サンプルには全てリアル試験合格させます


Fortinet NSE5_FMG-7.2試験は、ネットワークセキュリティに特化したITプロフェッショナル向けにFortinetが提供する認定試験です。この試験は、Fortinetのネットワークセキュリティ管理ソリューションであるFortiManager 7.2での作業経験を持つ個人を対象としています。試験は、複数のFortinetデバイス全体でのセキュリティポリシーの管理と管理能力を候補者の知識とスキルを検証することを目的としています。

 

質問 # 55
An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?

  • A. You must specify a gateway address when you create a default static route
  • B. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route
  • C. Remove all the interface references such as routes or policies
  • D. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.

正解：D


質問 # 56
Refer to the exhibit.

An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panesdo notappear? (Choose two.)

  • A. The administrator profile does not have full access privileges like theSuper_Userprofile.
  • B. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.
  • C. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.
  • D. FortiAnalyzer features are not enabled on FortiManager.

正解：A、D


質問 # 57
An administrator is replacing a failed device on FortiManager by running the following command:
execute device replace sn <devname> <serialnum>.
Which device name and serial number must the administrator use?

  • A. The device name and serial number of the new device
  • B. The device name of the failed device and serial number of the new device
  • C. The device name of the new device and serial number of the failed device
  • D. The device name and serial number of the failed device

正解：B

解説：
To replace the faulty device with the new device, take the following steps:
1. Note the device name of the original FortiGate.
If the replacement device is already listed as unregistered, then you will need to delete it from the unregistered device list in the root ADOM.
2. Add the serial number of the replacement FortiGate.
After the replace command is executed, FortiManager updates the serial number in its database.
3. Verify that the new device serial number is associated with the faulty device in FortiManager.
You can do this using the CLI or the System Information widget of FortiGate.
4. Send a request from the replacement device to register it with FortiManager Reference [Page 283] - https://ebin.pub/fortinet-fortimanager-study-guide-for-fortimanager-72.html


質問 # 58
An administrator, Trainer, who is assigned theSuper_Userprofile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.
What can prevent an admin account that hasSuper_Userrights over the device from approving a workflow session?

  • A. Student, who submitted the workflow session, must first self-approve the request
  • B. Trainer is not a part of workflow approval group
  • C. Trainer must close Student's workflow session before approving the request
  • D. Trainer does not have full rights over this ADOM

正解：B

解説：
Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/0800_ADOMs/1800_Workflow/0600_Work


質問 # 59
Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

  • A. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices
  • B. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices
  • C. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration
  • D. The Security Fabric settings are part of the device level settings

正解：B、D


質問 # 60
Refer to the exhibit.

Which two statements are true if the script is executed using the Device Database option? (Choose two.)

  • A. The successful execution of a script on the Device Database will create a new revision history
  • B. The Device Settings Status will be tagged as Modified
  • C. The script history will show successful installation of the script on the remote FortiGate
  • D. You must install these changes using the Install Wizard to a managed device

正解：B、D


質問 # 61
Exhibit.

Which two statements about the output are true'' (Choose two.)

  • A. The latest revision history for the managed FortiGate does match the FortiGate running configuration
  • B. Configuration changes directly made on FortiGate have been automatically updated to the device-level database
  • C. The latest revision history for the managed FortiGate does not match the device-level database
  • D. Configuration changes have been installed on FortiGate. which means the FortiGate configuration has been changed

正解：A、C

解説：
"conf: in sync" means FortiGate configuration is in sync with the latest running revision history. "db: modified" and "cond: pending" means that changes have been made to the device-level settings and need to be installed.
The example on this slide shows that the FortiGate configuration is in sync with the latest running revision history. However, changes have been made to the device-level settings. That is why the CLI output is showing db:modified and the cond is showing as pending. After you install the changes on FortiGate, it will show db: not modified and cond:OK. db:modified = Config changes made on FMG cond:in sync = Latest revision history in sync with FGT running-config cond:pending = Config changes needed to be installed Reference [Page 160] - https://ebin.pub/fortinet-fortimanager-study-guide-for-fortimanager-72.html


質問 # 62
In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

  • A. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.
  • B. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.
  • C. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device
  • D. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

正解：B

解説：
FortiManager_6.4_Study_Guide-Online - page 346
FortiManager HA doesn't support IP takeover where an HA state transition is transparent to administrators. If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:
1. Manually reconfigure one of the secondary devices to become the primary device
2. Reconfigure all other secondary devices to point to the new primary device


質問 # 63
View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?

  • A. 10.0.1.0/24
  • B. 192.168.0.1/24
  • C. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
  • D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.

正解：B


質問 # 64
Refer to the exhibit.

In the event that the monitored interface for the primary FortiManager device fails, which statement is true about FortiManager HA?

  • A. The FortiManager HAfailover is transparent to administrators and does not require any reconfiguration.
  • B. Reconfigure the primary device lo remove the peer IP of the failed device.
  • C. Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.
  • D. Reboot the failed device to remove its IP from the primary device.

正解：A

解説：
Select VRRP to configure automatic failover. When the monitored interface for the primary FortiManager is unreachable or down, HA automatic failover will occur, and the secondary FortiManager will automatically become the primary.


質問 # 65
Refer to the exhibit.

According to the error message why is FortiManager failing to add the FortiAnalyzer device?

  • A. The administrator must turn off the Use Legacy Device login and add the FortiAnalyzer device to the same network as Forti-Manager
  • B. The administrator must select the Forti-Manager administrative access checkbox on the FortiAnalyzer management interface
  • C. The administrator must use the correct user name and password of the FortiAnalyzer device
  • D. The administrator must use the Add Model Device section and discover the FortiAnalyzer device

正解：B


質問 # 66
Refer to the exhibits.
Exhibit one.

Exhibit two.

An administrator created a new system template named Training with two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed.
What can be the main reason for these unset commands?

  • A. The Training system template does not have assigned devices
  • B. The DNS addresses in the default system settings are the same as the Training system template
  • C. The Training system template has other default settings
  • D. The ADOM is locked by another administrator

正解：C


質問 # 67
Refer to the exhibit.

An administrator is about to add the FortiGate device to FortiManager using the discovery process FortiManager is operating behind a NAT device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings What is the expected result?

  • A. During discovery FortiManager sets both tie FortiManager NATed IP address and NAT device IP address on FortiGate
  • B. During discovery FortiManager sets the NATed device IP address on FortiGate
  • C. During discovery FortiManager sets trie FortiManager NATed IP address on FortiGate
  • D. During discovery FortiManager uses only the FortiGate serial number to establish the connection

正解：B


質問 # 68
Which of the following statements are true regarding VPN Manager? (Choose three.)

  • A. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
  • B. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
  • C. VPN Manager must be enabled on a per ADOM basis.
  • D. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.
  • E. VPN Manager automatically adds newly-registered devices to a VPN community.

正解：A、B、C


質問 # 69
Refer to the exhibit.

An administrator would like to create three ADOMs on FortiManager with different access levels based on departments.
What two conclusions can you draw from the design shown in the exhibit? (Choose two.)

  • A. The FortiManager policies and objects database can be shared between the Financial and HR ADOMs.
  • B. The administrator must configure FortiManager in workspace mode.
  • C. Admin A can access VDOM2 and VDOM3 with the super user profile.
  • D. The administrator must set the FortiManager ADOM mode to Advanced.

正解：A、D


質問 # 70
An administrator created a header and footer global policy package and assigned it to an ADOM.
What are two outcomes from this action? (Choose two.)

  • A. After you assign the global policy package to an ADOM, the policy package is hidden from the ADOM and cannot be viewed.
  • B. You must manually move the header and footer policies after the policy assignment.
  • C. You can edit or delete all the global objects in the global ADOM.
  • D. If you assign an additional global policy package to the same ADOM, FortiManaqer removes previously assigned policies.

正解：C、D

解説：
C = Assigning an additional global policy package to the same individual ADOM policy package removes previously assigned policies. D = After you assign the global ADOM objects, they appear on the Policy & Objects pane for that ADOM. All global objects start with "g" and are edited or deleted in the global ADOM only. Reference [Page 259] - https://ebin.pub/fortinet-fortimanager-study-guide-for-fortimanager-72.html


質問 # 71
Refer to the exhibit.

An administrator has created a firewall address object, Local, which is used in the Remote-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on Remote-FortiGate, for the Local firewall address object?

  • A. It will create the Local and Remote-Local firewall address objects on Remote-FortiGate with 192.168.5.0/24 and 10.0.2.0/24 values.
  • B. Remote-FortiGate will automatically choose an IP/netmask based on its network interface settings.
  • C. 192.168.5.0/24
  • D. 10.0.2.0/24

正解：D


質問 # 72
You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?

  • A. Any pending device settings will be installed automatically
  • B. Any unused objects from a previous ADOM are moved to the new ADOM automatically
  • C. The shared policy package will not be moved to the new ADOM
  • D. Policy packages will be imported into the new ADOM automaticallyD

正解：C


質問 # 73
......

NSE5_FMG-7.2[2025年07月] 最新リリース] 試験問題あなたを必ず合格させます：https://www.goshiken.com/Fortinet/NSE5_FMG-7.2-mondaishu.html

Fortinet NSE5_FMG-7.2試験の基礎問題と解答：https://drive.google.com/open?id=1N1SyFx42256CK2chTUDDlAsVH4eR2QAY

関するブログ

もっと
NSE5_FMG-7.2無料問題集