Fortinet NSE5 Forti Manager v7.2

Certification Provider: Fortinet

Exam: FCP: Forti Manager 7.2 Administrator

Exam Code: NSE5 FMG v7.2

Total Question: 72

Question per Quiz: 35

Updated On: 10 April 2025

Note: In order to practice all the Q/A's, you have to practice multiple time. Question's and Answer's will be presented randomly and will help you get hands-on for real exam.

An administrator would like to review, approve or reject all the firewall policy changes made by the junior administrators. How should the workspace mode settings be configured on FortiManager?

Set to workspace and using the policy locking feature

Set to normal and using the approval group feature

Set to workflow and using the ADOM locking feature

Set to read/write and using the policy locking feature

None

Refer to the exhibit. An administrator has created a firewall address object, Local, which is used in the Remote-FortiGate policy package. When the installation operation is performed, which IP/Netmask will be installed on Remote-FortiGate, for the Local firewall address object?

It will create the Local and Remote-Local firewall address objects on Remote-FortiGate with 192.168.5.0/24 and 10.0.2.0/24 values.

10.0.2.0/24

Remote-FortiGate will automatically choose an IP/netmask based on its network interface settings.

192.168.5.0/24

None

Refer to the exhibit. According to the error message, why is FortiManager failing to add the FortiAnalyzer device?

The administrator must use the correct user name and password of the FortiAnalyzer device.

The administrator must turn off the Use Legacy Device login and add the FortiAnalyzer device to the same network as Forti Manager.

The administrator must use the Add Model Device section and discover the Forti Analyzer device.

The administrator must select the Forti Manager administrative access checkbox on the Forti Analyzer management interface.

None

Refer to the exhibit. A junior administrator is troubleshooting a FortiManager connectivity issue that is occurring with managed FortiGate devices. Given the FortiManager device manager settings shown in the exhibit, what can you conclude from the exhibit?

The administrator must refresh both devices to restore connectivity.

Forti Manager lost internet connectivity, therefore, both devices appear to be down.

The administrator had restored the Forti Manager configuration file.

The administrator can reclaim the FGFM tunnel to get both devices online.

None

An administrator is replacing a failed device on FortiManager by running the following command: execute device replace sn . Which device name and serial number must the administrator use?

The device name and serial number of the failed device.

The device name of the failed device and serial number of the new device.

The device name and serial number of the new device.

The device name of the new device and serial number of the failed device.

None

In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

The FortiManager administrator must add the unregistered device manually to the unregistered device manually to the Training ADOM using the Add Device wizard

By default, the unregistered FortiGate will appear in the root ADOM.

The FortiGate will be added automatically to the default ADOM named FortiGate.

The FortiGate will be automatically added to the Training ADOM.

None

What does a policy package status of Never Installed indicate?

The policy configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

FortiManager is unable to determine the policy package status.

The policy package was never imported after a device was registered on Forti Manager.

The policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager.

None

What will happen if FortiAnalyzer features are enabled on FortiManager?

FortiManager will keep all the logs and reports on the FortiManager.

FortiManager will enable ADOMs to collect logs automatically from non-FortiGate devices.

FortiManager will install the logging configuration to the managed devices.

FortiManager can be used only as a logging device.

None

Refer to the exhibit. How will FortiManager try to get updates for antivirus and IPS?

From the list of configured override servers or public FDN servers

From the configured override server IP address 10.0.1.50 only

From the default server fds1.fortinet.com

From public FDNI server IP address with the fourth highest octet only

None

10.

Refer to the exhibit. You are using the Quick Install option to install configuration changes on the managed FortiGate. Which two statements correctly describe the result? (Choose two.)

It provides the option to preview only the policy package changes before installing them.

It installs provisioning template changes on the FortiGate device.

It installs all the changes in the device database first and the administrator must reinstall the changes on the FortiGate device.

It installs device-level changes on the FortiGate device without launching the Install Wizard.

11.

An administrator with the Super_User profile is unable to log in to FortiManager because of an authentication failure message. Which troubleshooting step should you take to resolve the issue?

Make sure FortiManager Access is enabled in the administrator profile

Make sure the administrator IP address is part of the trusted hosts.

Make sure Offline Mode is disabled

Make sure ADOMs are enabled and the administrator has access to the Global ADOM

None

12.

What will be the result of reverting to a previous revision version in the revision history?

It will install configuration changes to managed device automatically.

It will modify the device-level database.

It will tag the device settings status as Auto-Update.

It will generate a new version ID and remove all other revision history versions.

None

13.

What is the advantage of using FortiManager to manage FortiAnalyzer?

It allows FortiManager to store all managed FortiGate device logs.

It allows FortiManager to manage all FortiGate devices.

It allows FortiManager to act as a collector and FortiAnalyzer device.

It allows FortiManager to run reports based on FortiAnalyzer.

None

14.

What is the purpose of ADOM revisions?

To save the current state of the whole ADOM

To save the current state of all policy packages and objects for an ADOM

To revert individual policy packages and device-level settings for a managed FortiGate

To save the FortiManager configuration in the System Checkpoints

None

15.

Refer to the exhibit. Which two statements about the output are true? (Choose two.)

Configuration changes directly made on FortiGate have been automatically updated to the device-level database.

The latest revision history for the managed FortiGate does match the FortiGate running configuration.

Configuration changes have been installed on FortiGate, which means the FortiGate configuration has been changed.

The latest revision history for the managed FortiGate does not match the device-level database.

16.

An administrator’s PC crashes before the administrator can submit a workflow session for approval. After the PC is restarted, the administrator notices that the ADOM was locked from the session before the crash. How can the administrator unlock the ADOM?

Delete the previous admin session manually through the Forti Manager GUI or CLI.

Restore the configuration from a previous backup.

None

17.

What will happen if the script is run using the Device Database option? (Choose two.)

The script history will show successful installation of the script on the remote FortiGate.

The successful execution of a script on the Device Database will create a new revision history.

The Device Settings Status will be tagged as Modified.

You must install these changes using the Install Wizard to a managed device.

18.

When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

FortiManager will revert and install a previous configuration revision on the managed FortiGate.

FortiGate will reject the CLI commands that will cause the tunnel to go down.

FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.

After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

None

19.

An administrator runs the Policy Check feature on Forti Manager ADOM. What will be the result?

It will find and provide recommendations for optimizing policies in a policy package.

It will find and merge duplicate policies in the policy package.

It will find and provide recommendations to combine multiple separate policy packages into one common policy package.

It will find and delete disabled firewall policies in the policy package.

None

20.

Which two statements about an ADOM set in Normal mode on Forti Manager are true?

FortiManager automatically installs the configuration difference in revisions on the managed FortiGate.

It supports the FortiManager script feature.

You cannot assign the same ADOM to multiple administrators.

It allows making configuration changes for managed devices on FortiManager panes.

21.

Refer to the exhibit. What can you conclude from the failed installation log shown in the exhibit?

Policy ID 2 is installed without a source address.

Policy ID 2 will not be installed.

Policy ID 2 is installed in the disabled state.

Policy ID 2 is installed without the remote user student.

None

22.

Refer to the exhibit. An administrator is about to add the FortiGate device to FortiManager using the discovery process. FortiManager is operating behind a NAT device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings. What is the expected result?

During discovery, FortiManager sets the FortiManager NATed IP address on FortiGate.

During discovery, FortiManager sets both the FortiManager NATed IP address and NAT device IP address on FortiGate.

During discovery, FortiManager sets the NATed device IP address on FortiGate.

During discovery, FortiManager uses only the FortiGate serial number to establish the connection.

None

23.

In the event that the monitored interface for the primary FortiManager device fails, which statement is true about Forti Manager HA?

Reconfigure the primary device to remove the peer IP of the failed device.

Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device

The FortiManager HA failover is transparent to administrators and does not require any reconfiguration.

Reboot the failed device to remove its IP from the primary device.

None

24.

Which configuration setting for FortiGate is part of a device-level database on FortiManager?

Firewall policies

Security profiles

VIP and IP Pools

Routing

None

25.

What is the purpose of the Policy Check feature on FortiManager?

To find and delete disabled firewall policies in the policy package

To find and provide recommendation for optimizing policies in a policy package

To find and merge duplicate policies in the policy package

To find and provide recommendation to combine multiple separate policy packages into one common

None

26.

Given the configuration shown in the exhibit, what can you conclude from the installation targets in the Install On column? (Choose two.)

Policy seq.# 3 will be skipped because no installation targets are specified.

Policy seq.# 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target.

Policy seq.# 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets.

Policy 3 will be installed on all FortiGate devices and vdom belongs to the ADOM.

Policy seq # 1 will be installed on the Remote-FortiGate root[NAT] and Student[NAT] VDOMs only.

27.

An administrator configures a new OSPF route on FortiManager and has not yet pushed the changes to the managed FortiGate device. In which database will the configuration be saved?

Device-level database

ADOM-level database

Configuration-level database

Revision history database

None

28.

Which two settings must be configured for SD-WAN Central Management? (Choose two.)

SD-WAN must be enabled on per-ADOM basis

You can create multiple SD-WAN interfaces per VDOM

The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

When you configure an SD-WAN, you must specify at least two member interfaces.

29.

An administrator enabled workspace mode and now wants to delete an address object that is currently referenced in a firewall policy. Which two results can the administrator expect to happen? (Choose two.)

FortiManager will disable the status of the address object.

FortiManager will temporarily change the status of the referenced firewall policy.

FortiManager will replace the deleted address object with the none address object in the referenced firewall policy.

FortiManager will not allow the administrator to delete a referenced address object until the ADOM is locked.

30.

Given the configuration shown in the exhibit, which two statements are true?

The FortiManager ADOM is locked by the administrator.

The Forti Manager ADOM workspace mode is set to Normal.

Forti Manager is in workflow mode.

An administrator can also lock the Local-FortiGate-1 policy package.

Time's up

Follow Us

PCNSE – Palo Alto Certified Network Security Engineer

PCNSC – Paloalto Certified Network Security Consultant

No Comment! Be the first one.

Leave a Reply Cancel reply

Popular

Get Free eBooks

IPv6 Addressing and Prefix

Social

Newsletter

Follow Us

Type and hit Enter to search

Fortinet NSE5 Forti Manager v7.2

Share Article

PCNSE – Palo Alto Certified Network Security Engineer

PCNSC – Paloalto Certified Network Security Consultant

No Comment! Be the first one.

Leave a Reply Cancel reply

Popular

Get Free eBooks

IPv6 Addressing and Prefix

Social

Newsletter