PassLeader just published the NEWEST Fortinet NSE5_FMG-7.0 exam dumps! And, PassLeader offer two types of the NSE5_FMG-7.0 dumps — NSE5_FMG-7.0 VCE dumps and NSE5_FMG-7.0 PDF dumps, both VCE and PDF contain the NEWEST NSE5_FMG-7.0 exam questions, they will help you PASSING the Fortinet NSE5_FMG-7.0 exam easily! Now, get the NEWEST NSE5_FMG-7.0 dumps in VCE and PDF from PassLeader — https://www.passleader.com/nse5-fmg-7-0.html (80 Q&As Dumps)
What’s more, part of that PassLeader NSE5_FMG-7.0 dumps now are free — https://drive.google.com/drive/folders/12LzRcamN3PokFTmizDB3wMz8TQ1DPbO8
NEW QUESTION 1
Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)
A. Managed gateways are devices managed by FortiManager in the same ADOM.
B. External gateways are third-party VPN gateway devices only.
C. Protected subnets are the subnets behind the device that you don’t want to allow access to over the IPsec VPN.
D. Managed devices in other ADOMs must be treated as external gateways.
Answer: AD
Explanation:
http://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/1300_VPN_Manager/0800_IPsec_VPN_Gateway/0400_Create_mngd_gateway.htm
NEW QUESTION 2
Which of the following statements are true regarding reverting to previous revision version from the revision history? (Choose two.)
A. To push these changes to a managed device, it required an install operation to the managed FortiGate.
B. Reverting to a previous revision history will generate a new version ID and remove all other history versions.
C. Reverting to a previous revision history will tag the device settings status as Auto-Update.
D. It will modify device-level database.
Answer: AD
NEW QUESTION 3
An administrator would like to authorize a newly-installed AP using AP Manager. What steps does the administrator need to perform to authorize an AP?
A. Authorize the new AP using AP Manager and wait until the change is updated on the FortiAP. Changes to the AP’s state do not require installation.
B. Changes to the AP’s state must be performed directly on the managed FortiGate.
C. Authorize the new AP using AP Manager and install the policy package changes on the managed FortiGate.
D. Authorize the new AP using AP Manager and install the device level settings on the managed FortiGate.
Answer: D
NEW QUESTION 4
Which of the following statements are true regarding VPN Manager? (Choose three.)
A. VPN Manager must be enabled on a per ADOM basis.
B. VPN Manager automatically adds newly-registered devices to a VPN community.
C. VPN Manager can install common IPsec VPN settings on multiple FortiGate devices at the same time.
D. Common IPsec settings need to be configured only once in a VPN Community for all managed gateways.
E. VPN Manager automatically creates all the necessary firewall policies for traffic to be tunneled by IPsec.
Answer: ACD
NEW QUESTION 5
What does a policy package status of Modified indicate?
A. FortiManager is unable to determine the policy package status.
B. The policy package was never imported after a device was registered on FortiManager.
C. The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager.
D. The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
Answer: D
Explanation:
http://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/0800_Managing%20policy%20packages/2200_Policy%20Package%20Installation%20targets.htm
NEW QUESTION 6
Which of the following statements are true regarding schedule backup of FortiManager? (Choose two.)
A. Backs up all devices and the FortiGuard database.
B. Does not back up firmware images saved on FortiManager.
C. Supports FTP, SCP, and SFTP.
D. Can be configured from the CLI and GUI.
Answer: BC
NEW QUESTION 7
An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?
A. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route.
B. You must specify a gateway address when you create a default static route.
C. Remove all the interface references such as routes or policies.
D. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.
Answer: D
NEW QUESTION 8
An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces. Which interface must the administrator select in the static route device drop-down list?
A. port2
B. virtual-wan-link
C. port1
D. auto-discovery
Answer: B
NEW QUESTION 9
An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?
A. Allows FortiManager to download IPS packages.
B. Allows FortiManager to respond to request for FortiGuard services from FortiGate devices.
C. Allows FortiManager to run real-time debugs on the managed devices.
D. Allows FortiManager to automatically configure a default route.
Answer: B
NEW QUESTION 10
An administrator configures a new firewall policy on FortiManager and has not yet pushed the changes to the managed FortiGate. In which database will the configuration be saved?
A. Device-level database.
B. Revision history database.
C. ADOM-level database.
D. Configuration-level database.
Answer: C
Explanation:
https://kb.fortinet.com/kb/documentLink.do?externalID=FD47942
NEW QUESTION 11
What does a policy package status of Conflict indicate?
A. The policy package reports inconsistencies and conflicts during a Policy Consistency Check.
B. The policy package does not have a FortiGate as the installation target.
C. The policy package configuration has been changed on both FortiManager and the managed device independently.
D. The policy configuration has never been imported after a device was registered on FortiManager.
Answer: C
NEW QUESTION 12
What will be the result of reverting to a previous revision version in the revision history?
A. It will install configuration changes to managed device automatically.
B. It will tag the device settings status as Auto-Update.
C. It will generate a new version ID and remove all other revision history versions.
D. It will modify the device-level database.
Answer: D
NEW QUESTION 13
An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1. Which statement about the global policy package assignment to the newly-created policy package Fortinet is true?
A. When a new policy package is created, it automatically assigns the global policies to the new package.
B. When a new policy package is created, you need to assign the global policy package from the global ADOM.
C. When a new policy package is created, you need to reapply the global policy package to the ADOM.
D. When a new policy package is created, you can select the option to assign the global policies to the new package.
Answer: A
Explanation:
Global Policy Package is applied at the ADOM level and you have the option to choose which ADOM policy packages you want to exclude (there is no option to choose Policy Packages to include).
NEW QUESTION 14
Which two items are included in the FortiManager backup? (Choose two.)
A. FortiGuard database.
B. Global database.
C. Logs.
D. All devices.
Answer: BD
Explanation:
https://kb.fortinet.com/kb/viewContent.do?externalId=FD34549
NEW QUESTION 15
Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)
A. The Security Fabric license, group name and password are required for the FortiManager Security Fabric integration.
B. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices.
C. The Security Fabric settings are part of the device level settings.
D. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices.
Answer: CD
NEW QUESTION 16
Which two statements regarding device management on FortiManager are true? (Choose two.)
A. FortiGate devices in HA cluster devices are counted as a single device.
B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.
C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.
D. The maximum number of managed devices for each ADOM is 500.
Answer: AC
NEW QUESTION 17
An administrator would like to create an SD-WAN using central management in the Training ADOM. To create an SD-WAN using central management, which two steps must be completed? (Choose two.)
A. Specify a gateway address when you create a default SD-WAN static route.
B. Enable SD-WAN central management in the Training ADOM.
C. Configure and install the SD-WAN firewall policy and SD-WAN static route before installing the SD-WAN template settings.
D. Remove all the interface references such as routes or policies that will be a part of SD-WAN member interfaces.
Answer: BD
Explanation:
https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/676493/removing-existing-configuration-references-to-interfaces
NEW QUESTION 18
An administrator wants to delete an address object that is currently referenced in a firewall policy. What can the administrator expect to happen?
A. FortiManager will not allow the administrator to delete a referenced address object.
B. FortiManager will disable the status of the referenced firewall policy.
C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy.
D. FortiManager will replace the deleted address object with all address object in the referenced firewall policy.
Answer: C
Explanation:
https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/1200_Managing%20objects/0800_Remove%20an%20object.htm
NEW QUESTION 19
Which two settings must be configured for SD-WAN Central Management? (Choose two.)
A. SD-WAN must be enabled on per-ADOM basis.
B. You can create multiple SD-WAN interfaces per VDOM.
C. When you configure an SD-WAN, you must specify at least two member interfaces.
D. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.
Answer: AC
NEW QUESTION 20
What are two outcomes of ADOM revisions? (Choose two.)
A. ADOM revisions can significantly increase the size of the configuration backups.
B. ADOM revisions can save the current size of the whole ADOM.
C. ADOM revisions can create System Checkpoints for the FortiManager configuration.
D. ADOM revisions can save the current state of all policy packages and objects for an ADOM.
Answer: AD
Explanation:
https://docs2.fortinet.com/document/fortimanager/6.0.0/best-practices/101837/adom-revisions
NEW QUESTION 21
……
Learning the PassLeader NSE5_FMG-7.0 dumps with VCE and PDF for 100% passing Fortinet certification — https://www.passleader.com/nse5-fmg-7-0.html (80 Q&As Dumps)
BONUS!!! Download part of PassLeader NSE5_FMG-7.0 dumps for free — https://drive.google.com/drive/folders/12LzRcamN3PokFTmizDB3wMz8TQ1DPbO8