Free Fortinet NSE5_FMG-7.2 Practice Exam with Questions & Answers | Set: 3

Name: How to Pass NSE5_FMG-7.2 Exams
Brand: Examstrack
SKU: nse5_fmg-7-2
Price: 36.75 USD
Availability: InStock

Questions 21

View the following exhibit.

NSE5_FMG-7.2 Question 21

Which statement is true regarding this failed installation log?

Options:

Policy ID 2 is installed without a source address

Policy ID 2 will not be installed

Policy ID 2 is installed in disabled state

Policy ID 2 is installed without a source device

Fortinet NSE5_FMG-7.2 Premium Access

Phoebe

28-Aug-2025

With examstrack.com, you can experience real exams-like conditions for NSE5_FMG-7.2.

Questions 22

In addition to the default ADOMs, an administrator has created a new ADOM named Training for FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate. Which one of the following statements is true?

Options:

The FortiGate will be added automatically to the default ADOM named FortiGate.

The FortiGate will be automatically added to the Training ADOM.

By default, the unregistered FortiGate will appear in the root ADOM.

The FortiManager administrator must add the unregistered device manually to the unregistered device

manually to the Training ADOM using the Add Device wizard

Questions 23

In the event that the primary FortiManager fails, which of the following actions must be performed to return the FortiManager HA to a working state?

Options:

Secondary device with highest priority will automatically be promoted to the primary role, and manually

reconfigure all other secondary devices to point to the new primary device

Reboot one of the secondary devices to promote it automatically to the primary role, and reconfigure all other secondary devices to point to the new primary device.

Manually promote one of the secondary devices to the primary role, and reconfigure all other secondary devices to point to the new primary device.

FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.

Questions 24

An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.

What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

NSE5_FMG-7.2 Question 24

Options:

Trainer is not a part of workflow approval group

Trainer does not have full rights over this ADOM

Trainer must close Student’s workflow session before approving the request

Student, who submitted the workflow session, must first self-approve the request

Questions 25

View the following exhibit.

NSE5_FMG-7.2 Question 25

When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)

Options:

Once initiated, the install process cannot be canceled and changes will be installed on the managed device

Will not create new revision in the revision history

Installs device-level changes to FortiGate without launching the Install Wizard

Provides the option to preview configuration changes prior to installing them

Questions 26

Refer to the exhibit showing a Download Import Report.

Why is it failing to import firewall policy ID 1?

Options:

Policy ID 1 is configured from the interface any to port6. FortiManager rejects the request to import this policy because the any interface does not exist on FortiManager.

The address object used in policy ID 1 already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.

Policy ID 1 does not have the ADOM Interface mapping configured on FortiManager.

Policy ID 1 for this managed FortiGate already exists on FortiManager in the policy package named Remote-FortiGate.

Questions 27

Refer to the exhibit.

NSE5_FMG-7.2 Question 27

An administrator is about to add the FortiGate device to FortiManager using the discovery process FortiManager is operating behind a NAT device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings

What is the expected result?

Options:

During discovery FortiManager sets trie FortiManager NATed IP address on FortiGate

During discovery FortiManager sets both tie FortiManager NATed IP address and NAT device IP address on FortiGate

During discovery FortiManager sets the NATed device IP address on FortiGate

During discovery FortiManager uses only the FortiGate serial number to establish the connection

Questions 28

Push updates are failing on a FortiGate device that is located behind a NAT device Which two settings should the administrator check? (Choose two.)

Options:

That the virtual IP address and correct ports are set on the NAT device

That the NAT device IP address and correct ports are configured on FortiManager

That the external IP address on the NAT device is set to DHCP and configured with the virtual IP

That the override server IP address is set on FortiManager and the NAT device

Questions 29

What is the purpose of the Policy Check feature on FortiManager?

Options:

It provides recommendations for optimizing policies in a policy package.

It provides recommendations to combine similar policy packages within an ADOM into one single policy package.

It compares the policy packages with the revision history, and updates policy packages in the ADOM database.

It merges and creates dynamic mappings for duplicate objects used in a policy package.

Questions 30

In the event that one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?

Options:

The FortiManaqer HA state transition is transparent to administrators and does not require any reconfiguration.

Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.

Reconfigure the primary device to remove the peer IP of the failed device.

Reboot the failed device to remove its IP from the primary device.