Free NSE5_FMG-7.0 Exam Braindumps
Fortinet NSE 5 - FortiManager 7.0 Questions 16–20 (page: 5)

Updated On: 9-Feb-2026

View the following exhibit.



If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results? (Choose two.)

  1. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
  2. FortiGate can announce itself to FortiManager only if the FortiManager IP address is configured on FortiGate under central management.
  3. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
  4. If the FCFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

Answer(s): A,C

Explanation:

Fortimanager can discover FortiGate through a NATed FortiGate IP address. If a FortiManager NATed IP address is configured on FortiGate, then FortiGate can announce itself to FortiManager. FortiManager will not attempt to re-establish the FGFM tunnel to the FortiGate NATed IP address, if the FGFM tunnel is interrupted. Just like it was in the NATed FortiManager scenario, the FortiManager NATed IP address in this scenario is not configured under FortiGate central management configuration.



Which two settings must be configured for SD-WAN Central Management? (Choose two.)

  1. SD-WAN must be enabled on per-ADOM basis
  2. You can create multiple SD-WAN interfaces per VDOM
  3. When you configure an SD-WAN, you must specify at least two member interfaces.
  4. The first step in creating an SD-WAN using FortiManager is to create two SD-WAN firewall policies.

Answer(s): A,C



An administrator wants to delete an address object that is currently referenced in a firewall policy. What can the administrator expect to happen?

  1. FortiManager will not allow the administrator to delete a referenced address object
  2. FortiManager will disable the status of the referenced firewall policy
  3. FortiManager will replace the deleted address object with the none address object in the referenced
    firewall policy
  4. FortiManager will replace the deleted address object with all address object in the referenced firewall policy

Answer(s): C


Reference:

https://help.fortinet.com/fmgr/50hlp/56/5-6-2/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/1200_Managing%20objects/0800_Remove%20an%20object.htm



An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the Workspace mode be configured on FortiManager?

  1. Set to workflow and use the ADOM locking feature
  2. Set to read/write and use the policy locking feature
  3. Set to normal and use the policy locking feature
  4. Set to disable and use the policy locking feature

Answer(s): A


Reference:

https://help.fortinet.com/fmgr/50hlp/52/5-2-0/FMG_520_Online_Help/200_What's-New.03.03.html



Refer to the following exhibit:



Which of the following statements are true based on this configuration? (Choose two.)

  1. The same administrator can lock more than one ADOM at the same time
  2. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out
  3. Unlocking an ADOM will submit configuration changes automatically to the approval administrator
  4. Unlocking an ADOM will install configuration automatically on managed devices

Answer(s): A,B


Reference:

http://help.fortinet.com/fmgr/cli/5-6-2/Document/0800_AD0Ms/200_Configuring+.htm



Viewing page 5 of 15
Viewing questions 21 - 25 out of 72 questions


Post your Comments and Discuss Fortinet NSE5_FMG-7.0 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!