Free NSE5-FMG-7-2 Fortinet NSE5-FMG-7-2 Practice Test Question - Page 2

Question 4 (Topic 1)

Refer to the exhibit. What can you conclude from the failed installation log shown in the exhibit?

Select an option, then click Submit answer.

○ Policy ID 2 will not be installed.
○ Policy ID 2 is installed in the disabled state.
○ Policy ID 2 is installed without a source address.
○ Policy ID 2 is installed without the remote user student.

Reference / correct answer:

Policy ID 2 is installed without the remote user student.

Most accepted answer: D. Policy ID 2 is installed without the remote user student.

Community votes: A=2, D=3

Selected Answer: D Since "users" is not mandatory, and all the other elements are set, the policy will be created. Tested in lab: Local-FG # config firewall policy Local-FG (policy) # edit 2 new entry '2' added Local-FG (2) # set srcintf a Local-FG (2) # set dstintf b Local-FG (2) # set srcaddr all Local-FG (2) # set dstaddr all Local-FG (2) # set action accept Local-FG (2) # set schedule always Local-FG (2) # set service ALL Local-FG (2) # set users student entry not found in datasource value parse error before 'student' Command fail. Return code -3 Local-FG (2) # set nat enable Local-FG (2) # next Local-FG (policy) # end Local-FG # show firewall policy config firewall policy edit 2 set uuid 00879f84-bf81-51ee-3191-7623414c44a4 set srcintf "a" set dstintf "b" set srcaddr "all" set dstaddr "all" set action accept set schedule "always" set service "ALL" set nat enable upvoted 5 times

D is the answer. upvoted 2 times

D. Policy ID 2 is installed without the remote user student. Tested this in my LAB with a Script on Fortigate through FortiManager. User/Student fails to be created, but the Firewall policy is created fine. upvoted 4 times

Selected Answer: D D is correct. User is not a mandatory field. upvoted 3 times

Selected Answer: D D is the answer. upvoted 3 times

Question 5 (Topic 1)

Refer to the exhibit. If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

Select an option, then click Submit answer.

○ During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
○ If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
○ FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
○ FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.

Question 6 (Topic 1)

What are two outcomes of ADOM revisions? (Choose two.)

Select an option, then click Submit answer.

○ ADOM revisions can save the current state of the whole ADOM.
○ ADOM revisions can save the current state of all policy packages and objects for an ADOM.
○ ADOM revisions can significantly increase the size of the configuration backups.
○ ADOM revisions can create System Checkpoints for the FortiManager configuration.

Free NSE5-FMG-7-2 – Fortinet NSE5-FMG-7-2 Practice Test Question