100%の合格率を試そう！更新されたのはNSE5_FMG-7.0試験問題 [2023]
合格させるNSE5_FMG-7.0試験にはリアル問題解答
フォーティネットNSE5_FMG-7.0試験は、組織内でセキュリティポリシーとデバイスの管理に責任を持つネットワーク管理者、セキュリティエンジニア、および他のIT専門家を対象としています。この試験は、FortiManager 7.0を使用してフォーティネットのセキュリティソリューションを構成、展開、および管理する能力をテストします。この試験はまた、デバイスの発見、ポリシーの管理、ユーザー認証、および構成のバックアップなどのトピックをカバーしています。
質問 # 28
Refer to the exhibit.
You are using the Quick Install option to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)
- A. It provides the option to preview configuration changes prior to installing them
- B. It cannot be canceled once initiated and changes will be installed on the managed device
- C. It will not create a new revision in the revision history
- D. It installs device-level changes to FortiGate without launching the Install Wizard
正解：B、D
解説：
FortiManager_6.4_Study_Guide-Online - page 164
The Install Config option allows you to perform a quick installation of device-level settings without launching the Install Wizard. When you use this option, you cannot preview the changes prior to committing. Administrator should be certain of the changes before using this install option, because the install can't be cancelled after the process is initiated.
質問 # 29
An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.
Which interface must the administrator select in the static route device drop-down list?
- A. auto-discovery
- B. port2
- C. port1
- D. virtual-wan-link
正解：D
質問 # 30
View the following exhibit.
Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?
- A. The Install On column value represents successful installation on the managed devices
- B. Policy seq#3 will be installed on the Trainer[NAT] VDOM only
- C. Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets
- D. Policy seq#3 will be not installed on any managed device
正解：C
質問 # 31
An administrator would like to create an SD-WAN using central management. What steps does the
administrator need to perform to create an SD-WAN using central management?
- A. You must specify a gateway address when you create a default static route
- B. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.
- C. Remove all the interface references such as routes or policies
- D. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route
正解：B
質問 # 32
View the following exhibit.
Which of the following statements are true based on this configuration setting? (Choose two.)
- A. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.
- B. This setting will enable the ADOMs feature on FortiManager.
- C. This setting is applied globally to all ADOMs.
- D. This setting will allow automatic updates to the policy package configuration for a managed device.
正解：A、C
質問 # 33
View the following exhibit.
When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)
- A. Provides the option to preview configuration changes prior to installing them
- B. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
- C. Installs device-level changes to FortiGate without launching the Install Wizard
- D. Will not create new revision in the revision history
正解：B、C
質問 # 34
Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)
- A. Managed devices in other ADOMs must be treated as external gateways
- B. Protected subnets are the subnets behind the device that you don't want to allow access to over the IPsec VPN
- C. Managed gateways are devices managed by FortiManager in the same ADOM
- D. External gateways are third-party VPN gateway devices only
正解：A、C
質問 # 35
What is the purpose of the Policy Check feature on FortiManager?
- A. To find and provide recommendation for optimizing policies in a policy package
- B. To find and merge duplicate policies in the policy package
- C. To find and delete disabled firewall policies in the policy package
- D. To find and provide recommendation to combine multiple separate policy packages into one common policy package
正解：A
質問 # 36
Which of the following statements are true regarding schedule backup of FortiManager? (Choose two.)
- A. Backs up all devices and the FortiGuard database.
- B. Does not back up firmware images saved on FortiManager
- C. Can be configured from the CLI and GUI
- D. Supports FTP, SCP, and SFTP
正解：B、D
質問 # 37
View the following exhibit.
What is the purpose of setting ADOM Mode to Advanced?
- A. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.
- B. The setting disables concurrent ADOM access and adds ADOM locking
- C. The setting enables the ADOMs feature on FortiManager
- D. The setting allows automatic updates to the policy package configuration for a managed device
正解：A
質問 # 38
Which of the following statements are true regarding VPN Manager? (Choose three.)
- A. VPN Manager automatically adds newly-registered devices to a VPN community.
- B. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.
- C. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
- D. VPN Manager must be enabled on a per ADOM basis.
- E. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
正解：C、D、E
質問 # 39
What will happen if FortiAnalyzer features are enabled on FortiManager?
- A. FortiManager will keep all the logs and reports on the FortiManager.
- B. FortiManager can be used only as a logging device.
- C. FortiManager will enable ADOMs to collect logs automatically from non-FortiGate devices.
- D. FortiManager will install the logging configuration to the managed devices
正解：D
質問 # 40
An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?
- A. Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.
- B. Changes to the AP's state must be performed directly on the managed FortiGate.
- C. Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.
- D. Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.
正解：D
質問 # 41
Refer to the exhibit.
Given the configuration shown in the exhibit, which two statements are true? (Choose two.)
- A. It disables concurrent read-write access to an ADOM.
- B. It allows two or more administrators to make configuration changes at the same time, in the same ADOM.
- C. It is used to validate administrator login attempts through external servers.
- D. It allows the same administrator to lock more than one ADOM at the same time.
正解：A、D
質問 # 42
View the following exhibit:
How will FortiManager try to get updates for antivirus and IPS?
- A. From the list of configured override servers with ability to fall back to public FDN servers
- B. From public FDNI server with highest index number only
- C. From the configured override server list only
- D. From the default server fdsl.fortinet.com
正解：A
質問 # 43
An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1.
Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?
- A. When a new policy package is created, it automatically assigns the global policies to the new package.
- B. When a new policy package is created, you can select the option to assign the global policies to the new package.
- C. When a new policy package is created, you need to assign the global policy package from the global ADOM.
- D. When a new policy package is created, you need to reapply the global policy package to the ADOM.
正解：A
解説：
Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).
質問 # 44
What does a policy package status of Modified indicate?
- A. FortiManager is unable to determine the policy package status
- B. The policy package was never imported after a device was registered on FortiManager
- C. The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
- D. The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager
正解：C
質問 # 45
An administrator has added all the devices in a Security Fabric group to FortiManager.
How does the administrator identify the root FortiGate?
- A. By a dollar symbol ($) at the end of the device name
- B. By a Question:
- C. By an Asterisk (*) at the end of the device name
- D. By an at symbol (@) at the end of the device name
正解：C
質問 # 46
In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?
- A. Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.
- B. FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.
- C. Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.
- D. Secondary device with highest priority will automatically be promoted to the primary role, and manually reconfigure all other secondary devices to point to the new primary device
正解：C
解説：
FortiManager_6.4_Study_Guide-Online - page 346
FortiManager HA doesn't support IP takeover where an HA state transition is transparent to administrators. If a failure of the primary occurs, the administrator must take corrective action to resolve the problem that may include invoking the state transition. If the primary device fails, the administrator must do the following in order to return the FortiManager HA to a working state:
1. Manually reconfigure one of the secondary devices to become the primary device
2. Reconfigure all other secondary devices to point to the new primary device
質問 # 47
Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?
- A. Routing
- B. SNMP
- C. NSX-T Service Template
- D. Security profiles
正解：A
質問 # 48
Refer to the exhibit.
An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?
- A. It allows FortiGate to unset central management settings.
- B. It allows FortiGate to reboot and recover the previous configuration from its configuration file.
- C. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.
- D. It allows FortiGate to reboot and restore a previously working firmware image.
正解：B
質問 # 49
Refer to the exhibit.
Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?
- A. FortiManager ignored the firewall service category general and deleted the duplicate value In Its database
- B. FortiManager ignored the firewall service category General and did not update Its database with the value
- C. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.
- D. FortiManager ignored the firewall service category General but created a new service category in its database.
正解：C
質問 # 50
What will be the result of reverting to a previous revision version in the revision history?
- A. It will install configuration changes to managed device automatically
- B. It will tag the device settings status as Auto-Update
- C. It will generate a new version ID and remove all other revision history versions
- D. It will modify the device-level database
正解：D
質問 # 51
......
Fortinet NSE5_FMG-7.0 認定試験は、Fortinet ネットワークセキュリティソリューションの管理に関する知識とスキルを評価する試験です。デバイスの登録、ファームウェアの管理、ポリシーパッケージ、デバイステンプレート、仮想ドメインや自動化などの高度な機能を含むトピックが取り上げられます。この認定試験は2年間有効であり、Fortinet のソリューションの管理に熟練したネットワーク管理者、セキュリティ専門家、ITスタッフを対象としています。
Fortinet NSE5_FMG-7.0認定試験は、FortiManagerシステムを扱うITプロフェッショナルが、これらのシステムを管理および維持する専門知識を証明するための理想的な試験です。この試験に合格することにより、候補者はFortiManagerの機能と機能についてより良い理解を得ることができ、FortiManagerデバイスをより効果的に設定および管理することができます。さらに、この認定は、ネットワークセキュリティの専門知識を証明することにより、ITプロフェッショナルのキャリアを進めるのに役立ちます。
NSE5_FMG-7.0試験問題を最新版を今すぐ試そうの[2023年最新] 正解回答付き：https://jp.fast2test.com/NSE5_FMG-7.0-premium-file.html
無料Fortinet NSE5_FMG-7.0テスト練習問題試験問題集：https://drive.google.com/open?id=1SgUT29rkXWgQn-YfAWaYqOv93sE1t6bU