最新的NSE 5 Network Security Analyst認證 NSE5_FMG-7.0考試題庫

問題1

Which of the following statements are true regarding VPN Gateway configuration in VPN Manager? (Choose two.)

A. Protected subnets are the subnets behind the device that you don't want to allow access to over the IPsec VPN

B. External gateways are third-party VPN gateway devices only

C. Managed gateways are devices managed by FortiManager in the same ADOM

D. Managed devices in other ADOMs must be treated as external gateways

正確答案: C,D

問題2

Refer to the exhibit.

You are using the Quick Install option to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)

A. It cannot be canceled once initiated and changes will be installed on the managed device

B. It installs device-level changes to FortiGate without launching the Install Wizard

C. It will not create a new revision in the revision history

D. It provides the option to preview configuration changes prior to installing them

正確答案: A,B

說明：（僅 VCESoft 成員可見）

問題3

An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?

A. FortiManager will not allow the administrator to delete a referenced address object

B. FortiManager will disable the status of the referenced firewall policy

C. FortiManager will replace the deleted address object with all address object in the referenced firewall policy

D. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

正確答案: D

問題4

Push updates are failing on a FortiGate device that is located behind a NAT device Which two settings should the administrator check? (Choose two.)

A. That the virtual IP address and correct ports are set on the NAT device

B. That the override server IP address is set on FortiManager and the NAT device

C. That the external IP address on the NAT device is set to DHCP and configured with the virtual IP

D. That the NAT device IP address and correct ports are configured on FortiManager

正確答案: C,D

問題5

Refer to the exhibit.

Which two statements are true if the script is executed using the Device Database option? (Choose two.)

A. The Device Settings Status will be tagged as Modified

B. You must install these changes using the Install Wizard to a managed device

C. The successful execution of a script on the Device Database will create a new revision history

D. The script history will show successful installation of the script on the remote FortiGate

正確答案: A,B

問題6

Which two settings must be configured for SD-WAN Central Management? (Choose two.)

A. When you configure an SD-WAN, you must specify at least two member interfaces.

B. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

C. You can create multiple SD-WAN interfaces per VDOM

D. SD-WAN must be enabled on per-ADOM basis

正確答案: A,D

問題7

Which two settings are required for FortiManager Management Extension Applications (MEA)? (Choose two.)

A. You must create a MEA special policy on FortiManager using the super user profile

B. When you configure MEA, you must open TCP or UDP port 540.

C. You must open the ports to the Fortinet registry

D. The administrator must have the super user profile.

正確答案: A,D

問題8

Which two statements about the scheduled backup of FortiManager are true? (Choose two.)

A. It backs up all devices and the FortiGuard database.

B. It does not back up firmware images saved on FortiManager.

C. It supports FTP, SCP, and SFTP.

D. It can be configured using the CLI and GUI.

正確答案: B,C

最新的Fortinet NSE 5 - FortiManager 7.0 - NSE5_FMG-7.0免費考試真題

最新更新

站內鏈接

聯系我們