PDF (New 2025) Actual Fortinet NSE5_FMG-7.2 Exam Questions
Dumps Moneyack Guarantee - NSE5_FMG-7.2 Dumps UpTo 90% Off
Fortinet NSE5_FMG-7.2 (Fortinet NSE 5 - FortiManager 7.2) Certification Exam is designed to test the knowledge and skills of IT professionals who are responsible for managing multiple Fortinet devices using FortiManager 7.2. NSE5_FMG-7.2 exam covers various topics including FortiManager administration, device registration, policy management, device monitoring and troubleshooting. Passing this certification exam validates your understanding of FortiManager and your ability to manage Fortinet devices efficiently.
NEW QUESTION # 42
View the following exhibit.
Which of the following statements are true based on this configuration setting? (Choose two.)
- A. This setting will enable the ADOMs feature on FortiManager.
- B. This setting will allow assigning different VDOMs from the same FortiGate to different ADOMs.
- C. This setting will allow automatic updates to the policy package configuration for a managed device.
- D. This setting is applied globally to all ADOMs.
Answer: B,D
NEW QUESTION # 43
What is the purpose of the Policy Check feature on FortiManager?
- A. To find and delete disabled firewall policies in the policy package
- B. To find and merge duplicate policies in the policy package
- C. To find and provide recommendation to combine multiple separate policy packages into one common policy package
- D. To find and provide recommendation for optimizing policies in a policy package
Answer: D
NEW QUESTION # 44
Refer to the exhibit.
An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?
- A. 10.200.1.0/24
- B. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.
- C. 192.168.0.1/24
- D. It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.
Answer: C
NEW QUESTION # 45
Which three settings are the factory default settings on FortiManager? (Choose three.)
- A. Password is fortinet
- B. FortiAnalyzer features are disabled
- C. port1 interface IP address is 192.168.1.99/24
- D. Username is admin
- E. Reports and Event Monitor panes are enabled
Answer: B,C,D
NEW QUESTION # 46
An administrator run the reload failure command: diagnose test deploymanager reload config
<deviceid> on FortiManager. What does this command do?
- A. It installs the latest configuration on the specified FortiGate and update the revision history database.
- B. It installs the provisioning template configuration on the specified FortiGate.
- C. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
- D. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
Answer: C
NEW QUESTION # 47
View the following exhibit.
Which one of the following statements is true regarding the object named ALL?
- A. FortiManager updated the object ALL using FortiGate's value in its database
- B. FortiManager installed the object ALL with the updated value.
- C. FortiManager created the object ALL as a unique entity in its database, which can be only used by this managed FortiGate.
- D. FortiManager updated the object ALL using FortiManager's value in its database
Answer: A
NEW QUESTION # 48
An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message.
Which troubleshooting step should you take to resolve the issue?
- A. Make sure FortiManager Access is enabled in the administrator profile
- B. Make sure ADOMs are enabled and the administrator has access to the Global ADOM
- C. Make sure the administrator IP address is part of the trusted hosts.
- D. Make sure Offline Mode is disabled
Answer: C
Explanation:
Even if a user entered the correct userid/password, the FMG denies access if a user is logging in from an untrusted source IP subnets.
NEW QUESTION # 49
Refer to the exhibit.
Given the configuration shown in the exhibit, what are two results from this configuration? (Choose two.)
- A. The same administrator can lock more than one ADOM at the same time. Most Voted
- B. Concurrent read-write access to an ADOM is disabled. Most Voted
- C. You can validate administrator login attempts through external servers.
- D. Two or more administrators can make configuration changes at the same time, in the same ADOM.
Answer: A,B
NEW QUESTION # 50
An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?
- A. Changes to the AP's state must be performed directly on the managed FortiGate.
- B. Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.
- C. Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.
- D. Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.
Answer: B
NEW QUESTION # 51
Refer to the exhibit.
Which statement is true about the FortiManager ADOM policy tab based on the API request?
- A. The API command has enabled both central NAT and interface policy on the policy tab.
- B. The API command has failed when requesting policy tab permissions information.
- C. The API command has requested the policy tab permissions information only.
- D. The API command has applied to customer with ID: 200.
Answer: A
NEW QUESTION # 52
Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)
- A. TheFabric Viewmodule enables you to view the Security Fabric ratings for Security Fabric devices
- B. TheFabric Viewmodule enables you to generate the Security Fabric ratings for Security Fabric devices
- C. The Security Fabric settings are part of the device level settings
- D. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration
Answer: A,C
NEW QUESTION # 53
Which configuration setting for FortiGate is part of a device-level database on FortiManager?
- A. Routing
- B. VIP and IP Pools
- C. Firewall policies
- D. Security profiles
Answer: D
Explanation:
The FortiManager stores the FortiGate configuration details in two distinct databases. The device-level database includes configuration details related to device-level settings, such as interfaces, DNS, routing, and more. The ADOM-level database includes configuration details related to firewall policies, objects, and security profiles.
NEW QUESTION # 54
Refer to the exhibit.
You ate using the Quick install option to install configuration changes on the managed FortiGate Which two statements correctly describe the result? (Choose two)
- A. It installs device-level changes on the FortiGate device without launching the Install Wizard
- B. It provides the option to preview only the policy package changes before installing them
- C. It installs all the changes in the device database first and the administrator must reinstall the changes on the FodiGate device
- D. It install provisioning template changes on the FortiGate device
Answer: A,D
NEW QUESTION # 55
View the following exhibit.
If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)
- A. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
- B. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
- C. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.
- D. If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
Answer: A,B
Explanation:
Fortimanager can discover FortiGate through a NATed FortiGate IP address. If a FortiManager NATed IP address is configured on FortiGate, then FortiGate can announce itself to FortiManager. FortiManager will not attempt to re-establish the FGFM tunnel to the FortiGate NATed IP address, if the FGFM tunnel is interrupted. Just like it was in the NATed FortiManager scenario, the FortiManager NATed IP address in this scenario is not configured under FortiGate central management configuration.
NEW QUESTION # 56
View the following exhibit:
How will FortiManager try to get updates for antivirus and IPS?
- A. From public FDNI server with highest index number only
- B. From the list of configured override servers with ability to fall back to public FDN servers
- C. From the configured override server list only
- D. From the default server fdsl.fortinet.com
Answer: B
NEW QUESTION # 57
......
Fortinet NSE5_FMG-7.2 Exam is part of the Fortinet Network Security Expert (NSE) certification program, which is designed to validate the skills and knowledge of IT professionals in using Fortinet products and solutions. By passing NSE5_FMG-7.2 exam, candidates can demonstrate their proficiency in FortiManager and enhance their career opportunities in the IT industry.
Updated Aug-2025 Pass NSE5_FMG-7.2 Exam - Real Practice Test Questions: https://pass4sure.prep4cram.com/NSE5_FMG-7.2-exam-cram.html
