Free NSE5_FMG-7.0 Exam Braindumps

- (Exam Topic 3)
Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

1. A. Managed gateways are devices managed by FortiManager in the same ADOM
2. B. External gateways are third-party VPN gateway devices only
3. C. Protected subnets are the subnets behind the device that you don’t want to allow access to over the IPsec VPN
4. D. Managed devices in other ADOMs must be treated as external gateways

Correct Answer: AD
Reference: http://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/1300_VPN_Manager/0800_IPsec_VPN_Gateway/0400_Create_mngd_gateway.htm

- (Exam Topic 1)
View the following exhibit.

An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

1. A. The unused objects that are not tied to the firewall policies will be installed on FortiGate
2. B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
3. C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
4. D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database

Correct Answer: C
Reference:
https://community.fortinet.com/t5/FortiManager/Import-all-objects-Versus-Import-only-policy-dependent-objec

- (Exam Topic 1)
An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

1. A. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package
2. B. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.
3. C. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
4. D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

Correct Answer: D
Reference:
https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy and Objects/08

- (Exam Topic 1)
Refer to the exhibits. Exhibit one.

Exhibit two.

An administrator created a new system template named Training with two new DNS addresses on FortiManager. During the installation preview stage, the administrator notices that many unset commands need to be pushed.
What can be the main reason for these unset commands?

1. A. The DNS addresses in the default system settings are the same as the Training system template
2. B. The Training system template has other default settings
3. C. The ADOM is locked by another administrator
4. D. The Training system template does not have assigned devices

Correct Answer: B

- (Exam Topic 2)
Refer to the exhibit.

An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?

1. A. It allows FortiGate to unset central management settings.
2. B. It allows FortiGate to reboot and recover the previous configuration from its configuration file.
3. C. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.
4. D. It allows FortiGate to reboot and restore a previously working firmware image.

Correct Answer: B
Reference:
https://docs.fortinet.com/document/fortimanager/6.2.0/fortigate-fortimanager-communicationsprotocol-guide/14