NSE5_FMG-7.0 PDF問題集で2023年07月15日最近更新された問題
NSE5_FMG-7.0試験問題有効なNSE5_FMG-7.0問題集PDF
質問 # 11
View the following exhibit.
What is the purpose of setting ADOM Mode to Advanced?
- A. The setting allows automatic updates to the policy package configuration for a managed device
- B. The setting disables concurrent ADOM access and adds ADOM locking
- C. The setting enables the ADOMs feature on FortiManager
- D. This setting allows you to assign different VDOMs from the same FortiGate to different ADOMs.
正解：D
質問 # 12
An administrator's PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash.
How can the administrator unlock the ADOM?
- A. Log in as Super_User in order to unlock the ADOM.
- B. Log in using the same administrator account to unlock the ADOM.
- C. Delete the previous admin session manually through the FortiManager GUI or CLI.
- D. Restore the configuration from a previous backup.
正解：C
質問 # 13
Refer to the exhibit.
Given the configuration shown in the exhibit, how did FortiManager handle the service category named General?
- A. FortiManager ignored the firewall service category General but created a new service category in its database.
- B. FortiManager ignored the firewall service category General and did not update Its database with the value
- C. FortiManager ignored the firewall service category general and deleted the duplicate value In Its database
- D. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.
正解：D
質問 # 14
An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?
- A. Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.
- B. Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.
- C. Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP's state do not require installation.
- D. Changes to the AP's state must be performed directly on the managed FortiGate.
正解：B
質問 # 15
What does a policy package status of Conflict indicate?
- A. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.
- B. The policy configuration has never been imported after a device was registered on FortiManager.
- C. The policy package configuration has been changed on both FortiManager and the managed device
independently. - D. The policy package does not have a FortiGate as the installation target.
正解：C
質問 # 16
You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?
- A. Any unused objects from a previous ADOM are moved to the new ADOM automatically
- B. Any pending device settings will be installed automatically
- C. Policy packages will be imported into the new ADOM automaticallyD
- D. The shared policy package will not be moved to the new ADOM
正解：D
質問 # 17
What are two outcomes of ADOM revisions? (Choose two.)
- A. ADOM revisions can significantly increase the size of the configuration backups.
- B. ADOM revisions can create System Checkpoints for the FortiManager configuration
- C. ADOM revisions can save the current state of all policy packages and objects for an ADOM
- D. ADOM revisions can save the current size of the whole ADOM
正解：A、C
質問 # 18
Which two statements about the scheduled backup of FortiManager are true? (Choose two.)
- A. It supports FTP, SCP, and SFTP.
- B. It backs up all devices and the FortiGuard database.
- C. It does not back up firmware images saved on FortiManager.
- D. It can be configured using the CLI and GUI.
正解：A、C
質問 # 19
In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator authorized the FortiGate device on FortiManager using the Fortinet Security Fabric.
Given the administrator's actions, which statement correctly describes the expected result?
- A. The FortiManager administrator must add the authorized device to the Training ADOM using the Add Device wizard only.
- B. The authorized FortiGate will appear in the root ADOM.
- C. The authorized FortiGate can be added to the Training ADOM using FortiGate Fabric Connectors.
- D. The authorized FortiGate will be automatically added to the Training ADOM.
正解：B
質問 # 20
Refer to the exhibit.
An administrator has created a firewall address object, Training which is used in the Local-FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?
- A. 10.200.1.0/24
- B. 192.168.0.1/24
- C. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.
- D. It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.
正解：B
質問 # 21
Which of the following statements are true regarding VPN Manager? (Choose three.)
- A. VPN Manager must be enabled on a per ADOM basis.
- B. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
- C. VPN Manager automatically adds newly-registered devices to a VPN community.
- D. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
- E. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.
正解：A、B、D
質問 # 22
Refer to the exhibit.
Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)
- A. It supports the FortiManager script feature
- B. It allows making configuration changes for managed devices on FortiManager panes
- C. You cannot assign the same ADOM to multiple administrators
- D. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate
正解：A、B
解説：
"FortiGate units in the ADOM will query their own configuration every 5 seconds. If there has been a configuration change, the FortiGate unit will send a diff revision on the change to the FortiManager using the FGFM protocol."
質問 # 23
Which three settings are the factory default settings on FortiManager? (Choose three.)
- A. Reports and Event Monitor panes are enabled
- B. port1 interface IP address is 192.168.1.99/24
- C. Password is fortinet
- D. FortiAnalyzer features are disabled
- E. Username is admin
正解：B、D、E
質問 # 24
An administrator would like to create an SD-WAN using central management. What steps does the
administrator need to perform to create an SD-WAN using central management?
- A. Remove all the interface references such as routes or policies
- B. You must specify a gateway address when you create a default static route
- C. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.
- D. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route
正解：C
質問 # 25
View the following exhibit.
When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)
- A. Provides the option to preview configuration changes prior to installing them
- B. Will not create new revision in the revision history
- C. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
- D. Installs device-level changes to FortiGate without launching the Install Wizard
正解：C、D
質問 # 26
An administrator is replacing a device on FortiManager by running the following command:
execute device replace sn <devname> <serialnum>.
What device name and serial number must the administrator use?
- A. Device name and serial number of the replacement device.
- B. Device name and serial number of the original device.
- C. Device name of the replacement device and serial number of the original device.
- D. Device name of the original device and serial number of the replacement device.
正解：D
質問 # 27
View the following exhibit:
Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI) option? (Choose two.)
- A. FortiManager will create a new revision history.
- B. You must install these changes using Install Wizard
- C. FortiGate will auto-update the FortiManager's device-level database.
- D. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.
正解：A、C
質問 # 28
An administrator has added all the devices in a Security Fabric group to FortiManager.
How does the administrator identify the root FortiGate?
- A. By a dollar symbol ($) at the end of the device name
- B. By a Question:
- C. By an Asterisk (*) at the end of the device name
- D. By an at symbol (@) at the end of the device name
正解：C
質問 # 29
Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)
- A. Protected subnets are the subnets behind the device that you don't want to allow access to over the IPsec
VPN - B. Managed devices in other ADOMs must be treated as external gateways
- C. Managed gateways are devices managed by FortiManager in the same ADOM
- D. External gateways are third-party VPN gateway devices only
正解：B、C
質問 # 30
......
NSE5_FMG-7.0問題集合格確定させる練習には74問があります：https://www.jpntest.com/shiken/NSE5_FMG-7.0-mondaishu