Fortinet NSE5_FMG-7.2 問題集

質問 1：
An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the Workspace mode be configured on FortiManager?
A. Set to disable and use the policy locking feature
B. Set to normal and use the policy locking feature
C. Set to read/write and use the policy locking feature
D. Set to workflow and use the ADOM locking feature
正解：D

質問 2：
What is the purpose of ADOM revisions?
A. To create System Checkpoints for the FortiManager configuration.
B. To save the current state of the whole ADOM.
C. To save the current state of all policy packages and objects for an ADOM.
D. To revert individual policy packages and device-level settings for a managed FortiGate by reverting to a specific ADOM revision
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
What does the diagnose dvm check-integrity command do? (Choose two.)
A. Internally upgrades existing ADOMs to the same ADON version in order to clean up and correct the ADOM syntax
B. Verifies and corrects unregistered, registered, and deleted device states
C. Verifies and corrects database schemas in all object tables
D. Verifies and corrects duplicate VDOM entries
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Push updates are failing on a FortiGate device that is located behind a NAT device Which two settings should the administrator check? (Choose two.)
A. That the override server IP address is set on FortiManager and the NAT device
B. That the NAT device IP address and correct ports are configured on FortiManager
C. That the external IP address on the NAT device is set to DHCP and configured with the virtual IP
D. That the virtual IP address and correct ports are set on the NAT device
正解：B,C

質問 5：
Refer to the exhibit.

An administrator has created a firewall address object, Local, which is used in the Remote-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on Remote-FortiGate, for the Local firewall address object?
A. 10.0.2.0/24
B. 192.168.5.0/24
C. Remote-FortiGate will automatically choose an IP/netmask based on its network interface settings.
D. It will create the Local and Remote-Local firewall address objects on Remote-FortiGate with 192.168.5.0/24 and 10.0.2.0/24 values.
正解：A

質問 6：
Refer to the exhibit.

An administrator would like to create three ADOMs on FortiManager with different access levels based on departments.
What two conclusions can you draw from the design shown in the exhibit? (Choose two.)
A. Admin A can access VDOM2 and VDOM3 with the super user profile.
B. The administrator must configure FortiManager in workspace mode.
C. The FortiManager policies and objects database can be shared between the Financial and HR ADOMs.
D. The administrator must set the FortiManager ADOM mode to Advanced.
正解：C,D

質問 7：
View the following exhibit.

An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?
A. The unused objects that are not tied to the firewall policies will be installed on FortiGate
B. The unused objects that are not tied to the firewall policies in policy package will be deleted from the
C. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
D. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
What does a policy package status of Conflict indicate?
A. The policy package configuration has been changed on both FortiManager and the managed device independently.
B. The policy package does not have a FortiGate as the installation target.
C. The policy configuration has never been imported after a device was registered on FortiManager.
D. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.
正解：A