Fortinet NSE5_FMG-7.2 問題集

質問 1：
In the event that one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?
A. Reconfigure the primary device to remove the peer IP of the failed device.
B. Reboot the failed device to remove its IP from the primary device.
C. Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.
D. The FortiManaqer HA state transition is transparent to administrators and does not require any reconfiguration.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the Workspace mode be configured on FortiManager?
A. Set to disable and use the policy locking feature
B. Set to normal and use the policy locking feature
C. Set to read/write and use the policy locking feature
D. Set to workflow and use the ADOM locking feature
正解：D

質問 3：
An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?
A. It allows FortiManager to determine the connection status of managed devices.
B. It allows administrative access to FortiManager.
C. It allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.
D. It allows third-party applications to gain read/write access to FortiManager.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Refer to the exhibit.

You are using the Quick Install option to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)
A. It installs device-level changes to FortiGate without launching the Install Wizard
B. It provides the option to preview configuration changes prior to installing them
C. It cannot be canceled once initiated and changes will be installed on the managed device
D. It will not create a new revision in the revision history
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Push updates are failing on a FortiGate device that is located behind a NAT device Which two settings should the administrator check? (Choose two.)
A. That the override server IP address is set on FortiManager and the NAT device
B. That the NAT device IP address and correct ports are configured on FortiManager
C. That the external IP address on the NAT device is set to DHCP and configured with the virtual IP
D. That the virtual IP address and correct ports are set on the NAT device
正解：B,C

質問 6：
Refer to the exhibit.

Which two statements are true if the script is executed using the Device Database option? (Choose two.)
A. The successful execution of a script on the Device Database will create a new revision history
B. You must install these changes using the Install Wizard to a managed device
C. The script history will show successful installation of the script on the remote FortiGate
D. The Device Settings Status will be tagged as Modified
正解：B,D

質問 7：
View the following exhibit.

Given the configurations shown in the exhibit, what can you conclude from the installation targets in the Install On column?
A. Policy seq # 1 will be installed on the Remote-FortiGate root[NAT] and Student[NAT] VDOMs only.
B. Policy seq.# 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets.
C. Policy seq.# 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target.
D. Policy seq.# 3 will be skipped because no installation targets are specified.
E. Policy 3 will be installed on all FortiGate devices and vdom belongs to the ADOM.
正解：A,B

質問 8：
Refer to the exhibit.

Given the configuration shown in the exhibit, what are two results from this configuration? (Choose two.)
A. The same administrator can lock more than one ADOM at the same time. Most Voted
B. Concurrent read-write access to an ADOM is disabled. Most Voted
C. You can validate administrator login attempts through external servers.
D. Two or more administrators can make configuration changes at the same time, in the same ADOM.
正解：A,B