NSE5_FMG-7.0 PDFで合格させるスゴ問題集でNSE5_FMG-7.0最新のリアル試験問題
有効なNSE5_FMG-7.0テスト解答NSE5_FMG-7.0試験PDF問題を試そう
質問 # 16
In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?
- A. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.
- B. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device
- C. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.
- D. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.
正解：A
解説：
FortiManager_6.4_Study_Guide-Online - page 346
FortiManager HA doesn't support IP takeover where an HA state transition is transparent to administrators. If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:
1. Manually reconfigure one of the secondary devices to become the primary device
2. Reconfigure all other secondary devices to point to the new primary device
質問 # 17
When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?
- A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
- B. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.
- C. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
- D. FortiGate will reject the CLI commands that will cause the tunnel to go down.
正解：A
質問 # 18
Refer to the exhibit.
Which statement about the object named ALL is true?
- A. FortiManager updated the object ALL using the FortiGate value in its database.
- B. FortiManager created the object ALL as a unique entity in its database, which can be only used by this
managed FortiGate. - C. FortiManager updated the object ALL using the FortiManager value in its database.
- D. FortiManager installed the object ALL with the updated value.
正解：A
質問 # 19
Push updates are failing on a FortiGate device that is located behind a NAT device Which two settings should the administrator check? (Choose two.)
- A. That the virtual IP address and correct ports are set on the NAT device
- B. That the override server IP address is set on FortiManager and the NAT device
- C. That the NAT device IP address and correct ports are configured on FortiManager
- D. That the external IP address on the NAT device is set to DHCP and configured with the virtual IP
正解：C、D
質問 # 20
When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?
- A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
- B. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
- C. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.
- D. FortiGate will reject the CLI commands that will cause the tunnel to go down.
正解：B
解説：
The configuration change will break the fgfm connection, causing the FortiGate unit to attempt to reconnect for 900 seconds. If the FortiGate cannot reconnect, it will rollback to its previous configuration.
質問 # 21
What does the diagnose dvm check-integrity command do? (Choose two.)
- A. Verifies and corrects database schemas in all object tables
- B. Verifies and corrects duplicate VDOM entries
- C. Verifies and corrects unregistered, registered, and deleted device states
- D. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM
syntax
正解：B、C
解説：
6.2 Study Guide page 305 verify and correct parts of the device manager databases, including: - inconsistent device-to-group and group-to-ADOM memberships - unregistered, registered, and deleted device states - device lock statuses - duplicate VDOM entries
質問 # 22
An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?
- A. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route
- B. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.
- C. You must specify a gateway address when you create a default static route
- D. Remove all the interface references such as routes or policies
正解：B
質問 # 23
An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.
Which interface must the administrator select in the static route device drop-down list?
- A. auto-discovery
- B. virtual-wan-link
- C. port2
- D. port1
正解：B
質問 # 24
View the following exhibit:
An administrator used the value shown in the exhibit when importing a Local-FortiGate into FortiManager. What name will be used to display the firewall policy for port1?
- A. port1 on both FortiGate and FortiManager
- B. port1 on FortiGate and WAN on FortiManager
- C. WAN zone on FortiGate and WAN interface on FortiManager
- D. WAN zone on FortiGate and WAN zone on FortiManager
正解：B
質問 # 25
An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the
managed FortiGate.
In which database will the configuration be saved?
- A. Device-level database
- B. Configuration-level database
- C. ADOM-level database
- D. Revision history database
正解：C
解説：
https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942
質問 # 26
Refer to the exhibit.
Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?
- A. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.
- B. FortiManager ignored the firewall service category general and deleted the duplicate value In Its database
- C. FortiManager ignored the firewall service category General and did not update Its database with the value
- D. FortiManager ignored the firewall service category General but created a new service category in its database.
正解：A
質問 # 27
Which three settings are the factory default settings on FortiManager? (Choose three.)
- A. Username is admin
- B. FortiAnalyzer features are disabled
- C. Password is fortinet
- D. Reports and Event Monitor panes are enabled
- E. port1 interface IP address is 192.168.1.99/24
正解：A、B、E
質問 # 28
An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.
What can prevent an admin account that has Super_User rights over the device from approving a workflow session?
- A. Trainer must close Student's workflow session before approving the request
- B. Trainer does not have full rights over this ADOM
- C. Student, who submitted the workflow session, must first self-approve the request
- D. Trainer is not a part of workflow approval group
正解：D
質問 # 29
Which two items are included in the FortiManager backup? (Choose two.)
- A. All devices
- B. Logs
- C. FortiGuard database
- D. Global database
正解：A、D
質問 # 30
View the following exhibit:
How will FortiManager try to get updates for antivirus and IPS?
- A. From the configured override server list only
- B. From the default server fdsl.fortinet.com
- C. From public FDNI server with highest index number only
- D. From the list of configured override servers with ability to fall back to public FDN servers
正解：D
質問 # 31
View the following exhibit.
Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?
- A. Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets
- B. Policy seq#3 will be not installed on any managed device
- C. Policy seq#3 will be installed on the Trainer[NAT] VDOM only
- D. The Install On column value represents successful installation on the managed devices
正解：A
質問 # 32
An administrator's PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.
How can the administrator unlock the ADOM?
- A. Restore the configuration from a previous backup.
- B. Log in as Super_User in order to unlock the ADOM.
- C. Log in using the same administrator account to unlock the ADOM.
- D. Delete the previous admin session manually through the FortiManager GUI or CLI.
正解：D
質問 # 33
What does a policy package status of Conflict indicate?
- A. The policy package does not have a FortiGate as the installation target.
- B. The policy package configuration has been changed on both FortiManager and the managed device independently.
- C. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.
- D. The policy configuration has never been imported after a device was registered on FortiManager.
正解：B
質問 # 34
Refer to the exhibit.
Which two statements are true if the script is executed using the Device Database option? (Choose two.)
- A. The script history will show successful installation of the script on the remote FortiGate
- B. The Device Settings Status will be tagged as Modified
- C. You must install these changes using the Install Wizard to a managed device
- D. The successful execution of a script on the Device Database will create a new revision history
正解：B、C
質問 # 35
What is the purpose of ADOM revisions?
- A. To save the current state of the whole ADOM.
- B. To create System Checkpoints for the FortiManager configuration.
- C. To save the current state of all policy packages and objects for an ADOM.
- D. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision
正解：C
解説：
Fortimanager 6.4 Study guide page 198
質問 # 36
View the following exhibit:
Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI) option? (Choose two.)
- A. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.
- B. FortiGate will auto-update the FortiManager's device-level database.
- C. FortiManager will create a new revision history.
- D. You must install these changes using Install Wizard
正解：B、C
質問 # 37
An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?
- A. Changes to the AP's state must be performed directly on the managed FortiGate.
- B. Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.
- C. Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.
- D. Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.
正解：B
質問 # 38
An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?
- A. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.
- B. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
- C. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package
- D. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.
正解：A
質問 # 39
View the following exhibit.
An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?
- A. 10.0.1.0/24
- B. 192.168.0.1/24
- C. Local-FortiGate will automatically choose an IP Network based on its network interface settings.
- D. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
正解：A
質問 # 40
An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.
Which troubleshooting step should you take to resolve the issue?
- A. Make sure Offline Mode is disabled
- B. Make sure ADOMs are enabled and the administrator has access to the Global ADOM
- C. Make sure FortiManager Access is enabled in the administrator profile
- D. Make sure the administrator IP address is part of the trusted hosts.
正解：D
解説：
Even if a user entered the correct userid/password, the FMG denies access if a user is logging in from an untrusted source IP subnets.
質問 # 41
......
NSE5_FMG-7.0問題集はあなたの合格を必ず保証します：https://jp.fast2test.com/NSE5_FMG-7.0-premium-file.html
NSE5_FMG-7.0テスト問題集とオンライン試験エンジン：https://drive.google.com/open?id=1SgUT29rkXWgQn-YfAWaYqOv93sE1t6bU