NSE5 - FortiManager 7.2

Refer to the exhibit. An administrator has created a firewall address object, Local, which is used in the Remote-FortiGate policy package. When the installation operation is performed, which IP/Netmask will be installed on Remote-FortiGate, for the Local firewall address object?

• 192.168.5.0/24
• Remote-FortiGate will automatically choose an IP/netmask based on its network interface settings.
• 10.0.2.0/24
• It will create the Local and Remote-Local firewall address objects on Remote-FortiGate with 192.168.5.0/24 and 10.0.2.0/24 values.

An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1. What will happen to the Fortinet policy package when it is created?

• You need to assign the global policy package from the global ADOM.
• You can select the option to assign the global policies.
• You need to reapply the global policy package to the ADOM.
• It automatically assigns the global policies.

Refer to the exhibit. You are using the Quick Install option to install configuration changes on the managed FortiGate. Which two statements correctly describe the result? (Choose two.)

• It installs provisioning template changes on the FortiGate device.
• It installs device-level changes on the FortiGate device without launching the Install Wizard.
• It installs all the changes in the device database first and the administrator must reinstall the changes on the FortiGate device.
• It provides the option to preview only the policy package changes before installing them.

What is the purpose of the Policy Check feature on FortiManager?

• It compares the policy packages with the revision history, and updates policy packages in the ADOM database.
• It provides recommendations for optimizing policies in a policy package.
• It merges and creates dynamic mappings for duplicate objects used in a policy package.
• It provides recommendations to combine similar policy packages within an ADOM into one single policy package.

What will happen if FortiAnalyzer features are enabled on FortiManager?

• FortiManager will keep all the logs and reports on the FortiManager.
• FortiManager will install the logging configuration to the managed devices.
• FortiManager can be used only as a logging device.
• FortiManager will enable ADOMs to collect logs automatically from non-FortiGate devices.

Refer to the exhibit. An administrator wants to create a policy on the Staging ADOM in backup mode, and install it on the FortiGate device in the same ADOM. How can the administrator perform this task?

• The administrator must change the ADOM mode to Advanced to bring the FortiManager online.
• The administrator must disable the FortiManager offline mode first.
• The administrator must use the Policy & Objects section to create a policy first.
• The administrator must use the FortiManager script.

Which three settings are the factory default settings on FortiManager? (Choose three.)

• The administrative domain is disabled.
• The Port1 interface IP address is 192.168.1.99/24.
• Management Extension applications are enabled.
• The FortiManager setup wizard is disabled.
• FortiAnalyzer features are disabled

When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

• FortiGate will reject the CLI commands that will cause the tunnel to go down.
• FortiManager will revert and install a previous configuration revision on the managed FortiGate.
• FortiManager will not push the CLI commands as part of the installation that will cause the tunnel to go down.
• After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

Refer to the exhibit. An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM. After the installation operation is performed, which IP/netmask will be shown on FortiManager for this firewall address object without specify Per-Device Mapping?

• 0.0.0.0/0
• The FortiManager replaces the address object to none
• 192.168.1.0/24
• 10.0.5.0/24

Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

• The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices.
• The Security Fabric settings are part of the device-level settings.
• The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices.
• The Security Fabric license, group name, and password are required for the FortiManager Security Fabric integration.