Fortinet NSE5-FMG-7-2 Exam Questions
Questions for the NSE5-FMG-7-2 were updated on : Nov 23 ,2025
Page 1 out of 7. Viewing questions 1-10 out of 63
Question 1
What does a policy package status of Never Installed indicate?
- A. The policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager.
- B. FortiManager is unable to determine the policy package status.
- C. The policy configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
- D. The policy package was never imported after a device was registered on FortiManager.
Answer:
d
Question 2
Push updates are failing on a FortiGate device that is located behind a NAT device.
Which two settings should the administrator check? (Choose two.)
- A. That the virtual IP address and correct ports are set on the NAT device
- B. That the override server IP address is set on FortiManager and the NAT device
- C. That the external IP address on the NAT device is set to DHCP and configured with the virtual IP
- D. That the NAT device IP address and correct ports are configured on FortiManager
Answer:
ad
Question 3
Which two statements about the scheduled backup of FortiManager are true? (Choose two.)
- A. It can be configured using the CLI and GUI.
- B. It does not back up firmware images saved on FortiManager.
- C. It backs up all devices and the FortiGuard database.
- D. It supports FTP, SCP, and SFTP.
Answer:
ad
Question 4
Refer to the exhibit.
What can you conclude from the failed installation log shown in the exhibit?
- A. Policy ID 2 will not be installed.
- B. Policy ID 2 is installed in the disabled state.
- C. Policy ID 2 is installed without a source address.
- D. Policy ID 2 is installed without the remote user student.
Answer:
a
Question 5
What will be the result of reverting to a previous revision version in the revision history?
- A. It will generate a new version ID and remove all other revision history versions.
- B. It will install configuration changes to managed device automatically.
- C. It will tag the device settings status as Auto-Update.
- D. It will modify the device-level database.
Answer:
d
Question 6
An administrator runs the reload failure command diagnose test deploymanager reloadconf <deviceid> on FortiManager.
What does this command do?
- A. It reloads the policy package from the FortiManager to FortiGate.
- B. It installs the latest configuration on the specified FortiGate and updates the revision history database.
- C. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
- D. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
Answer:
c
Question 7
Refer to the exhibit.
An administrator is importing a new device to FortiManager and has selected the options shown in the exhibit.
What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?
- A. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted.
- B. The unused objects that are not tied to the firewall policies in the policy package will be deleted from the FortiManager database.
- C. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate.
- D. The unused objects that are not tied to the firewall policies will be installed on FortiGate.
Answer:
a
Question 8
You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?
- A. The shared device settings will be installed automatically.
- B. Any unused objects from a previous ADOM are moved to the new ADOM automatically.
- C. The shared policy package will not be moved to the new ADOM.
- D. Policy packages will be imported into the new ADOM automatically.
Answer:
c
Question 9
Which two items does an FGFM keepalive message include? (Choose two.)
- A. FortiGate uptime
- B. FortiGate license information
- C. FortiGate configuration checksum
- D. FortiGate IPS version
Answer:
cd
Question 10
Refer to the exhibit.
An administrator has configured the command shown in the exhibit on FortiManager. A configuration change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to go down for more than 15 minutes.
What is the purpose of this command?
- A. It allows FortiManager to unset the new configuration through CLI and reboot FortiGate.
- B. It allows FortiManager to revert and install a previous configuration revision on the managed FortiGate.
- C. It allows FortiGate to reboot and recover the previous configuration from its configuration file.
- D. It allows FortiGate to reboot and restore a previously working firmware image.
Answer:
c