NSE5_FMG-7.2練習テスト問題は更新された90問題あります
Fortinet NSE5_FMG-7.2問題集で一発合格できる問題を試そう！
Fortinet NSE5_FMG-7.2試験は、Fortinetデバイスの管理と維持を担当するネットワーク管理者、セキュリティエンジニア、およびIT専門家に最適です。この試験では、デバイスの登録、ポリシー管理、デバイス構成、ネットワーク分析など、幅広いトピックをカバーしています。この試験に合格した候補者は、複雑で動的なネットワーク環境でFortinetデバイスを効果的に管理および維持する能力を実証しました。
質問 # 11
Which two items are included in the FortiManager backup? (Choose two.)
- A. Global database
- B. All devices
- C. Logs
- D. FortiGuard database
正解：A、B
解説：
Reference:https://kb.fortinet.com/kb/viewContent.do?externalId=FD34549
質問 # 12
An administrator with theSuper_Userprofile is unable to log in to FortiManager because of an authentication failure message.
Which troubleshooting step should you take to resolve the issue?
- A. Make sure FortiManager Access is enabled in the administrator profile
- B. Make sure Offline Mode is disabled
- C. Make sure ADOMs are enabled and the administrator has access to the Global ADOM
- D. Make sure the administrator IP address is part of the trusted hosts.
正解：D
解説：
Even if a user entered the correct userid/password, the FMG denies access if a user is logging in from an untrusted source IP subnets.
Reference:https://docs.fortinet.com/document/fortimanager/6.0.3/administration-guide/107347/trusted-hosts
質問 # 13
In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?
- A. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.
- B. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.
- C. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.
- D. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device
正解：A
解説：
FortiManager_6.4_Study_Guide-Online - page 346
FortiManager HA doesn't support IP takeover where an HA state transition is transparent to administrators. If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:
1. Manually reconfigure one of the secondary devices to become the primary device
2. Reconfigure all other secondary devices to point to the new primary device
質問 # 14
View the following exhibit.
What is the purpose of settingADOM ModetoAdvanced?
- A. The setting disables concurrent ADOM access and adds ADOM locking
- B. The setting enables the ADOMs feature on FortiManager
- C. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.
- D. The setting allows automatic updates to the policy package configuration for a managed device
正解：C
解説：
Reference:https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/66530/adom-device-mode
質問 # 15
View the following exhibit.
Which one of the following statements is true regarding the object named ALL?
- A. FortiManager updated the object ALL using FortiGate's value in its database
- B. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.
- C. FortiManager updated the object ALL using FortiManager's value in its database
- D. FortiManager installed the object ALL with the updated value.
正解：A
質問 # 16
Which of the following statements are true regarding VPN Manager? (Choose three.)
- A. VPN Manager automatically adds newly-registered devices to a VPN community.
- B. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
- C. VPN Manager must be enabled on a per ADOM basis.
- D. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.
- E. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
正解：B、C、E
質問 # 17
Refer to the exhibit.
You ate using the Quick install option to install configuration changes on the managed FortiGate Which two statements correctly describe the result? (Choose two)
- A. It installs all the changes in the device database first and the administrator must reinstall the changes on the FodiGate device
- B. It provides the option to preview only the policy package changes before installing them
- C. It installs device-level changes on the FortiGate device without launching the Install Wizard
- D. It install provisioning template changes on the FortiGate device
正解：C、D
質問 # 18
View the following exhibit, which shows theDownload Import Report:
Why it is failing to import firewall policy ID 2?
- A. Policy ID 2 does not have ADOM Interface mapping configured on FortiManager
- B. The address object used in policy ID 2 already exist in ADON database with any as interface association and conflicts with address object interface association locally on the FortiGate
- C. Policy ID 2 for this managed FortiGate already exists on FortiManager in policy package named Remote-FortiGate.
- D. Policy ID 2 is configured from interface any to port6 FortiManager rejects to import this policy because any interface does not exist on FortiManager
正解：B
解説：
FortiManager_6.4_Study_Guide-Online - page 331 & 332
質問 # 19
Refer to the exhibit.
An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panesdo notappear? (Choose two.)
- A. The administrator IP address is not a part of the trusted hosts configured on FortiManager interfaces.
- B. FortiAnalyzer features are not enabled on FortiManager.
- C. The administrator profile does not have full access privileges like theSuper_Userprofile.
- D. The administrator logged in using the unsecure protocol HTTP, so the view is restricted.
正解：B、C
質問 # 20
Refer to the exhibit.
On FortiManager, an administrator created a new system template namedTrainingwith two new DNS addresses. During the installation preview stage, the administrator notices that central-management settings need to be purged.
What can be the main reason for the central-management purge command?
- A. The Remote-FortiGate device does not have any DNS server-list configured in the central-management settings.
- B. The DNS addresses in the default system settings are the same as the Training system template.
- C. The Training system template has a default FortiGuard widget.
- D. The ADOM is locked by another administrator.
正解：A
質問 # 21
What is the advantage of using FortiManager to manage PortiAnalyzer?
- A. It allows FortiManager to act as a collector and FortiAnalyzer device
- B. It allows FortiManager to store all managed FortiGate device logs
- C. It allows FortiManager to manage all FortiGate devices
- D. It allows FortiManager to fun reports based on FortiAnalyzer
正解：A
質問 # 22
Push updates are failing on a FortiGate device that is located behind a NAT device Which two settings should the administrator check? (Choose two.)
- A. That the NAT device IP address and correct ports are configured on FortiManager
- B. That the override server IP address is set on FortiManager and the NAT device
- C. That the external IP address on the NAT device is set to DHCP and configured with the virtual IP
- D. That the virtual IP address and correct ports are set on the NAT device
正解：A、C
質問 # 23
Refer to the following exhibit:
Which of the following statements are true based on this configuration? (Choose two.)
- A. Unlocking an ADOM will submit configuration changes automatically to the approval administrator
- B. The same administrator can lock more than one ADOM at the same time
- C. Unlocking an ADOM will install configuration automatically on managed devices
- D. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out
正解：B、D
解説：
Reference:http://help.fortinet.com/fmgr/cli/5-6-2/Document/0800_AD0Ms/200_Configuring+.htm
質問 # 24
What will be the result of reverting to a previous revision version in the revision history?
- A. It will install configuration changes to managed device automatically
- B. It will generate a new versionIDand remove all other revision history versions
- C. It will modify the device-level database
- D. It will tag the device settings status asAuto-Update
正解：C
質問 # 25
Which two conditions trigger FortiManager to create a new revision history? (Choose two.)
- A. When configuration revision is reverted to previous revision in the revision history
- B. When changes to device-level database is made on FortiManager
- C. When FortiManager is auto-updated with configuration changes made directly on a managed device
- D. When FortiManager installs device-level changes to a managed device
正解：C、D
解説：
Reference:https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1000_Device%20Manage
質問 # 26
Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)
- A. Reverting to a previous revision history will tag the device settings status asAuto-Update.
- B. To push these changes to a managed device, it required an install operation to the managed FortiGate.
- C. It will modify device-level database
- D. Reverting to a previous revision history will generate a new versionIDand remove all other history versions.
正解：B、C
質問 # 27
Refer to the exhibit.
Given the configuration shown in the exhibit, what can you conclude from the installation targets m the Install On column? (Choose two)
- A. Policy seq # 1 will be installed on the Remoto-FortiGate root[NAT] and Student[NAT] VDOMs only
- B. Policy seq # 3 will be skipped because no installation targets are specified
- C. Policy seq # 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets
- D. Policy seq # 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target
- E. Policy 3 will be installed on all FortiGate devices and vdom belongs to the ADOM
正解：A、C
質問 # 28
An administrator has added all the devices in a Security Fabric group to FortiManager.
How does the administrator identify the root FortiGate?
- A. By a dollar symbol ($) at the end of the device name
- B. By an Asterisk (*) at the end of the device name
- C. By an at symbol (@) at the end of the device name
- D. By a question mark(?) at the end of the device name
正解：B
質問 # 29
An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the managed FortiGate.
In which database will the configuration be saved?
- A. ADOM-level database
- B. Configuration-level database
- C. Revision history database
- D. Device-level database
正解：A
解説：
https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942
質問 # 30
......
Fortinet NSE5_FMG-7.2 認定試験は、Fortinet セキュリティソリューションに関連する幅広いトピックをカバーしています。FortiManager の構成と管理、FortiAnalyzer のインストールと構成、FortiManager と FortiAnalyzer の統合、および FortiManager と FortiAnalyzer のトラブルシューティングを含みます。認定試験は、複雑なネットワーク環境で Fortinet セキュリティソリューションを展開および管理する候補者の能力をテストするように設計されています。
Fortinet NSE5_FMG-7.2試験問題集で[2024年最新] 練習有効な試験問題集解答：https://jp.fast2test.com/NSE5_FMG-7.2-premium-file.html