Fortinet NSE5_FMG-7.0 問題集

質問 1：
View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate policy package. When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for the Training firewall address object?
A. Local-FortiGate will automatically choose an IP Network based on its network interface settings.
B. It will create firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values
C. 10.0.1.0/24
D. 192.168.0.1/24
正解：C

質問 2：
An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the Workspace mode be configured on FortiManager?
A. Set to disable and use the policy locking feature
B. Set to normal and use the policy locking feature
C. Set to read/write and use the policy locking feature
D. Set to workflow and use the ADOM locking feature
正解：D

質問 3：
An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?
A. When a new policy package is created, the administrator needs to reapply the global policy package to ADOM1.
B. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package
C. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.
D. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
正解：C

質問 4：
Which two statements about the scheduled backup of FortiManager are true? (Choose two.)
A. It can be configured using the CLI and GUI.
B. It supports FTP, SCP, and SFTP.
C. It backs up all devices and the FortiGuard database.
D. It does not back up firmware images saved on FortiManager.
正解：B,D

質問 5：
View the following exhibit.

Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?
A. Policy seq#3 will be installed on all managed devices and VDOMs that are listed under Installation Targets
B. Policy seq#3 will be not installed on any managed device
C. The Install On column value represents successful installation on the managed devices
D. Policy seq#3 will be installed on the Trainer[NAT] VDOM only
正解：A

質問 6：
Refer to the exhibit.

An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?
A. It allows FortiGate to reboot and restore a previously working firmware image.
B. It allows FortiGate to reboot and recover the previous configuration from its configuration file.
C. It allows the FortiManager to revert and install a previous configuration revision on the managed FortiGate.
D. It allows FortiGate to unset central management settings.
正解：B

質問 7：
An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?
A. Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.
B. Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.
C. Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.
D. Changes to the AP's state must be performed directly on the managed FortiGate.
正解：C