最新の[2024年04月28日]Fortinet NSE5_FMG-7.0試験練習テスト最高成績で最速合格をゲットせよ！
これを使えば必ず合格させる問題集でFortinet NSE5_FMG-7.0
Fortinet NSE5_FMG-7.0（Fortinet NSE 5 - FortiManager 7.0）認定試験は、FortiManagerを使用してFortinetセキュリティソリューションを管理および維持するIT専門家の知識とスキルをテストするために設計されています。この試験は、Fortinet製品の経験があり、FortiManagerベースのソリューションを管理する知識とスキルを強化したい個人を対象としています。この認定試験に合格することで、IT専門家はFortinetセキュリティソリューションを管理する専門知識を検証し、複雑なセキュリティインフラストラクチャを効果的に管理する能力を証明することができます。
質問 # 17
View the following exhibit.
Which statement is true regarding this failed installation log?
- A. Policy ID 2 will not be installed
- B. Policy ID 2 is installed without a source address
- C. Policy ID 2 is installed in disabled state
- D. Policy ID 2 is installed without a source device
正解：D
質問 # 18
View the following exhibit.
Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?
- A. The Install On column value represents successful installation on the managed devices
- B. Policy seq#3 will be installed on the Trainer[NAT] VDOM only
- C. Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets
- D. Policy seq#3 will be not installed on any managed device
正解：C
質問 # 19
Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)
- A. Protected subnets are the subnets behind the device that you don't want to allow access to over the IPsec VPN
- B. External gateways are third-party VPN gateway devices only
- C. Managed devices in other ADOMs must be treated as external gateways
- D. Managed gateways are devices managed by FortiManager in the same ADOM
正解：C、D
質問 # 20
What will happen if FortiAnalyzer features are enabled on FortiManager?
- A. FortiManager will install the logging configuration to the managed devices
- B. FortiManager will keep all the logs and reports on the FortiManager.
- C. FortiManager will enable ADOMs to collect logs automatically from non-FortiGate devices.
- D. FortiManager can be used only as a logging device.
正解：A
質問 # 21
Refer to the exhibit.
According to the error message why is FortiManager failing to add the FortiAnalyzer device?
- A. The administrator must use the Add Model Device section and discover the FortiAnaJyzer device
- B. The administrator must use the correct user name and password of the FortiAnalyzer device
- C. The administrator must turn off the Use Legacy Device login and add the FortiAnaJyzer device to the same network as Forti-Manager
- D. The administrator must select the Forti-Manager administrative access checkbox on the FortiAnalyzer management interface
正解：A
質問 # 22
Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?
- A. Security profiles
- B. SNMP
- C. Routing
- D. NSX-T Service Template
正解：A
質問 # 23
View the following exhibit.
When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)
- A. Installs device-level changes to FortiGate without launching the Install Wizard
- B. Provides the option to preview configuration changes prior to installing them
- C. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
- D. Will not create new revision in the revision history
正解：A、C
質問 # 24
An administrator would like to create an SD-WAN using central management. What steps does the
administrator need to perform to create an SD-WAN using central management?
- A. You must specify a gateway address when you create a default static route
- B. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.
- C. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route
- D. Remove all the interface references such as routes or policies
正解：B
質問 # 25
When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?
- A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
- B. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.
- C. FortiGate will reject the CLI commands that will cause the tunnel to go down.
- D. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
正解：A
質問 # 26
An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the Workspace mode be configured on FortiManager?
- A. Set to read/write and use the policy locking feature
- B. Set to normal and use the policy locking feature
- C. Set to disable and use the policy locking feature
- D. Set to workflow and use the ADOM locking feature
正解：D
質問 # 27
An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.
Which troubleshooting step should you take to resolve the issue?
- A. Make sure Offline Mode is disabled
- B. Make sure the administrator IP address is part of the trusted hosts.
- C. Make sure FortiManager Access is enabled in the administrator profile
- D. Make sure ADOMs are enabled and the administrator has access to the Global ADOM
正解：B
解説：
Even if a user entered the correct userid/password, the FMG denies access if a user is logging in from an untrusted source IP subnets.
質問 # 28
View the following exhibit.
Which of the following statements are true based on this configuration setting? (Choose two.)
- A. This setting is applied globally to all ADOMs.
- B. This setting will allow automatic updates to the policy package configuration for a managed device.
- C. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.
- D. This setting will enable the ADOMs feature on FortiManager.
正解：A、C
質問 # 29
View the following exhibit.
An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?
- A. The unused objects that are not tied to the firewall policies will be installed on FortiGate
- B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
- C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
- D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the
正解：C
解説：
FortiManager database
質問 # 30
Refer to the exhibit.
Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?
- A. FortiManager ignored the firewall service category general and deleted the duplicate value In Its database
- B. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.
- C. FortiManager ignored the firewall service category General but created a new service category in its database.
- D. FortiManager ignored the firewall service category General and did not update Its database with the value
正解：B
質問 # 31
An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?
- A. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.
- B. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
- C. When a new policy package is created, the administrator needs to reapply the global policy package to
ADOM1. - D. When creating a new policy package, the administrator can select the option to assign the global policy
package to the new policy package
正解：A
質問 # 32
An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the
managed FortiGate.
In which database will the configuration be saved?
- A. Device-level database
- B. Configuration-level database
- C. ADOM-level database
- D. Revision history database
正解：C
解説：
https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942
質問 # 33
View the following exhibit:
An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager. What name will be used to display the firewall policy for port1?
- A. WAN zone on FortiGate and WAN zone on FortiManager
- B. port1 on both FortiGate and FortiManager
- C. WAN zone on FortiGate and WAN interface on FortiManager
- D. port1 on FortiGate and WAN on FortiManager
正解：D
質問 # 34
View the following exhibit.
If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)
- A. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
- B. If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
- C. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
- D. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.
正解：A、C
解説：
Fortimanager can discover FortiGate through a NATed FortiGate IP address. If a FortiManager NATed IP address is configured on FortiGate, then FortiGate can announce itself to FortiManager. FortiManager will not attempt to re-establish the FGFM tunnel to the FortiGate NATed IP address, if the FGFM tunnel is interrupted. Just like it was in the NATed FortiManager scenario, the FortiManager NATed IP address in this scenario is not configured under FortiGate central management configuration.
質問 # 35
An administrator has added all the devices in a Security Fabric group to FortiManager.
How does the administrator identify the root FortiGate?
- A. By a Question NO : mark(?) at the end of the device name
- B. By a dollar symbol ($) at the end of the device name
- C. By an Asterisk (*) at the end of the device name
- D. By an at symbol (@) at the end of the device name
正解：C
質問 # 36
An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.
Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?
- A. When a new policy package is created, you can select the option to assign the global policies to the new package.
- B. When a new policy package is created, it automatically assigns the global policies to the new package.
- C. When a new policy package is created, you need to assign the global policy package from the global ADOM.
- D. When a new policy package is created, you need to reapply the global policy package to the ADOM.
正解：B
解説：
Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).
質問 # 37
......
Fortinet NSE5_FMG-7.0（Fortinet NSE 5 - FortiManager 7.0）認定試験は、FortiManagerに関連するさまざまなトピックをカバーしています。具体的には、Fortinetセキュリティソリューションの構成と管理、ポリシー管理、デバイス管理、セキュリティ分析とレポートなどが含まれます。高可用性や分散管理などの高度なトピックもカバーされています。この認定は、大規模なセキュリティインフラストラクチャを管理する責任があるITプロフェッショナルに最適であり、Fortinetセキュリティソリューションの管理における熟練度を証明する必要があります。この認定試験に合格することで、個人のキャリアを進め、サイバーセキュリティの分野で新しい機会を開くことができます。
正真正銘のベスト問題集資料を使おうNSE5_FMG-7.0オンライン練習試験：https://jp.fast2test.com/NSE5_FMG-7.0-premium-file.html
最大一年間毎日更新されるNSE5_FMG-7.0ブレーン問題集：https://drive.google.com/open?id=1SgUT29rkXWgQn-YfAWaYqOv93sE1t6bU