[2024年01月02日] 完全版には更新されたのはNSE 5 Network Security Analyst（NSE5_FMG-7.0）認定サンプル問題
最新のFortinet NSE5_FMG-7.0リアル試験問題集PDF
Fortinet NSE5_FMG-7.0試験は、Fortimanager 7.0の管理と管理に関する専門知識を証明したいITプロフェッショナル向けに設計された認定試験です。 Fortimanagerは、ファイアウォール、スイッチ、アクセスポイントなど、Fortinetのセキュリティデバイスの管理と構成に使用される集中管理プラットフォームです。 NSE5_FMG-7.0試験は、Fortimanager 7.0の実装と管理における候補者の知識とスキルをテストすることを目的としています。
質問 # 33
What will be the result of reverting to a previous revision version in the revision history?
- A. It will tag the device settings status as Auto-Update
- B. It will generate a new version ID and remove all other revision history versions
- C. It will install configuration changes to managed device automatically
- D. It will modify the device-level database
正解：D
質問 # 34
An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the
managed FortiGate.
In which database will the configuration be saved?
- A. Device-level database
- B. Revision history database
- C. ADOM-level database
- D. Configuration-level database
正解：C
解説：
https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942
質問 # 35
An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.
Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?
- A. When a new policy package is created, you can select the option to assign the global policies to the new package.
- B. When a new policy package is created, you need to reapply the global policy package to the ADOM.
- C. When a new policy package is created, you need to assign the global policy package from the global
ADOM. - D. When a new policy package is created, it automatically assigns the global policies to the new package.
正解：D
解説：
Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).
質問 # 36
An administrator run the reload failure command: diagnose test deploymanager reload config
<deviceid> on FortiManager. What does this command do?
- A. It installs the latest configuration on the specified FortiGate and update the revision history database.
- B. It installs the provisioning template configuration on the specified FortiGate.
- C. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
- D. It compares and provides differences in configuration on FortiManager with the current running
configuration of the specified FortiGate.
正解：C
質問 # 37
View the following exhibit, which shows the Download Import Report:
Why it is failing to import firewall policy ID 2?
- A. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager
- B. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager
- C. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.
- D. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate
正解：D
解説：
FortiManager_6.4_Study_Guide-Online - page 331 & 332
質問 # 38
Which configuration setting for FortiGate is part of a device-level database on FortiManager?
- A. Firewall policies
- B. Routing
- C. Security profiles
- D. VIP and IP Pools
正解：B
解説：
The FortiManager stores the FortiGate configuration details in two distinct databases. The device-level database includes configuration details related to device-level settings, such as interfaces, DNS, routing, and more. The ADOM-level database includes configuration details related to firewall policies, objects, and security profiles.
質問 # 39
Which two statements regarding device management on FortiManager are true? (Choose two.)
- A. The maximum number of managed devices for each ADOM is 500.
- B. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.
- C. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.
- D. FortiGate devices in HA cluster devices are counted as a single device.
正解：B、D
質問 # 40
View the following exhibit.
An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?
- A. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
- B. The unused objects that are not tied to the firewall policies will be installed on FortiGate
- C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
- D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the
正解：C
解説：
FortiManager database
質問 # 41
View the following exhibit.
An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?
- A. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
- B. 192.168.0.1/24
- C. 10.0.1.0/24
- D. Local-FortiGate will automatically choose an IP Network based on its network interface settings.
正解：C
質問 # 42
Refer to the exhibit.
An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?
- A. 10.200.1.0/24
- B. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.
- C. It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.
- D. 192.168.0.1/24
正解：D
質問 # 43
An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?
- A. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package
- B. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
- C. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.
- D. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.
正解：C
質問 # 44
Which two settings must be configured for SD-WAN Central Management? (Choose two.)
- A. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.
- B. SD-WAN must be enabled on per-ADOM basis
- C. When you configure an SD-WAN, you must specify at least two member interfaces.
- D. You can create multiple SD-WAN interfaces per VDOM
正解：B、C
質問 # 45
Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)
- A. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices
- B. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration
- C. The Security Fabric settings are part of the device level settings
- D. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices
正解：C、D
質問 # 46
Which of the following statements are true regarding VPN Manager? (Choose three.)
- A. VPN Manager automatically adds newly-registered devices to a VPN community.
- B. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
- C. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.
- D. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
- E. VPN Manager must be enabled on a per ADOM basis.
正解：B、D、E
質問 # 47
What does a policy package status of Modified indicate?
- A. The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
- B. The policy package was never imported after a device was registered on FortiManager
- C. The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager
- D. FortiManager is unable to determine the policy package status
正解：A
質問 # 48
Refer to the exhibit.
Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)
- A. It supports the FortiManager script feature
- B. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate
- C. You cannot assign the same ADOM to multiple administrators
- D. It allows making configuration changes for managed devices on FortiManager panes
正解：A、D
解説：
"FortiGate units in the ADOM will query their own configuration every 5 seconds. If there has been a configuration change, the FortiGate unit will send a diff revision on the change to the FortiManager using the FGFM protocol."
質問 # 49
An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.
Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?
- A. When a new policy package is created, you can select the option to assign the global policies to the new package.
- B. When a new policy package is created, you need to reapply the global policy package to the ADOM.
- C. When a new policy package is created, you need to assign the global policy package from the global ADOM.
- D. When a new policy package is created, it automatically assigns the global policies to the new package.
正解：D
解説：
Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).
質問 # 50
What will happen if FortiAnalyzer features are enabled on FortiManager?
- A. FortiManager will enable ADOMs to collect logs automatically from non-FortiGate devices.
- B. FortiManager will install the logging configuration to the managed devices
- C. FortiManager will keep all the logs and reports on the FortiManager.
- D. FortiManager can be used only as a logging device.
正解：B
質問 # 51
......
フォーティネットNSE5_FMG-7.0は、フォーティネットのセキュリティソリューションを管理するスキルを認定したい専門家を対象とした試験です。この試験は、セキュリティおよびネットワークの運用を簡素化する中央管理プラットフォームであるFortiManager 7.0の候補者の知識をテストすることを重点としています。この試験は、高性能なサイバーセキュリティソリューションのグローバルリーダーであるフォーティネットによって実施されます。
Fortinet NSE5_FMG-7.0 認定試験は、FortiManager プラットフォームを扱う IT プロフェッショナルのスキルと知識をテストするように設計されています。FortiManager は、組織がネットワークインフラストラクチャ全体にわたってセキュリティポリシーを中央集中的に管理および自動化するための包括的なネットワーク管理ソリューションです。試験は、FortiManager を構成、管理、トラブルシューティングするために必要なスキルと知識を検証するように設計されています。
Fortinet NSE5_FMG-7.0問題集で一発合格を目指すならこれ！：https://jp.fast2test.com/NSE5_FMG-7.0-premium-file.html
NSE5_FMG-7.0練習テスト問題更新されたのは74問があります：https://drive.google.com/open?id=1SgUT29rkXWgQn-YfAWaYqOv93sE1t6bU