NSE5 - FortiManager 7.2 (2)

You are moving managed FortiGate devices from one ADOM to a new ADOM. Which statement correctly describes the expected result?

• The shared device settings will be installed automatically.
• Any unused objects from a previous ADOM are moved to the new ADOM automatically.
• The shared policy package will not be moved to the new ADOM.
• Policy packages will be imported into the new ADOM automatically.

What is the purpose of ADOM revisions?*

• To save the FortiManager configuration in the System Checkpoints
• To revert individual policy packages and device-level settings for a managed FortiGate
• To save the current state of the whole ADOM
• To save the current state of all policy packages and objects for an ADOM

Which two statements about the scheduled backup of FortiManager are true? (Choose two.)

• It can be configured using the CLI and GUI.
• It does not back up firmware images saved on FortiManager.
• It backs up all devices and the FortiGuard database.
• It supports FTP, SCP, and SFTP.

An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?

• It allows administrative access to FortiManager.
• It allows FortiManager to determine the connection status of managed devices.
• It allows third-party applications to gain read/write access to FortiManager.
• It allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.

Refer to the exhibit. If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

• During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
• If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
• FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
• FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.

Refer to the exhibit. An administrator would like to create three ADOMs on FortiManager with different access levels based on departments. What two conclusions can you draw from the design shown in the exhibit? (Choose two.)*

• Admin A can access VDOM2 and VDOM3 with the super user profile.
• The FortiManager policies and objects database can be shared between the Financial and HR ADOMs.
• The administrator must set the FortiManager ADOM mode to Advanced.
• The administrator must configure FortiManager in workspace mode.

Refer to the exhibit. According to the error message, why is FortiManager failing to add the FortiAnalyzer device?

• The administrator must use the correct user name and password of the FortiAnalyzer device.
• The administrator must turn off the Use Legacy Device login and add the FortiAnalyzer device to the same network as FortiManager.
• The administrator must use the Add Model Device section and discover the FortiAnalyzer device.
• The administrator must select the FortiManager administrative access checkbox on the FortiAnalyzer management interface.

Refer to the exhibit. An administrator is importing a new device to FortiManager and has selected the options shown in the exhibit. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

• The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted.
• The unused objects that are not tied to the firewall policies in the policy package will be deleted from the FortiManager database.
• The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate.
• The unused objects that are not tied to the firewall policies will be installed on FortiGate.

Push updates are failing on a FortiGate device that is located behind a NAT device. Which two settings should the administrator check? (Choose two.)

• That the virtual IP address and correct ports are set on the NAT device
• That the override server IP address is set on FortiManager and the NAT device
• That the external IP address on the NAT device is set to DHCP and configured with the virtual IP
• That the NAT device IP address and correct ports are configured on FortiManager

An administrator has assigned a global policy package with All Policy Packages option selected to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

• When a new policy package is created, the administrator must import the global policy package to ADOM1.
• When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.
• When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
• When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package.