Free NSE5_FMG-7.2 Sample Questions — Fortinet NSE 5 - FortiManager 7.2

Fortinet NSE 5 - FortiManager 7.2 (NSE5_FMG-7.2) is a nse 5-level Fortinet certification exam. The blueprint splits the exam across 5 domains, starting with FortiManager deployment, Device management, Policy and objects. On exam day you face around 35 questions in 85 minutes, in formats such as multiple choice. The 10 questions below are free samples written to match that style: answer each one first, then reveal the correct answer and note which topics you miss. The NSE5_FMG-7.2 is rated intermediate in difficulty, and most candidates prepare with at least 12 months of hands-on experience. Because every answer is revealed in place, you can work through the whole set without leaving this page. Work through all 10 samples before deciding whether to buy the full 34+ question PDF.

  • 10 free questions
  • 85 min
  • $200 official fee
  • blueprint v7.2
  • Every free question shows the correct answer
  • Questions follow the official 5-domain blueprint
  • No account or email required
  • 34+ questions in the full PDF

Looking for more? Click here to get the full PDF with 34+ practice questions for $5 for offline study and deeper preparation.

Question 1

An administrator runs the reload failure command diagnose test deploymanager reloadconf <deviceid> on FortiManager. What does this command do?

  • A. It reloads the policy package from the FortiManager to FortiGate
  • B. It installs the latest configuration on the specified FortiGate and updates the revision history database
  • C. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database
  • D. It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate
Show Answer
Correct Answer:
C. It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database
Question 2

What does a policy package status of Conflict indicate?

  • A. The policy configuration has never been imported after a device was registered on FortiManager
  • B. The policy package does not have FortiGate as the installation target
  • C. The policy package configuration has been changed on both FortiManager and the managed device independently
  • D. The policy package reports inconsistencies and conflicts during a Policy Consistency Check
Show Answer
Correct Answer:
C. The policy package configuration has been changed on both FortiManager and the managed device independently
Question 3

Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

  • A. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices
  • B. The Security Fabric settings are part of the device-level settings
  • C. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices
  • D. The Security Fabric license, group name, and password are required for the FortiManager Security Fabric integration
Show Answer
Correct Answer:
  • B. The Security Fabric settings are part of the device-level settings
  • C. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices
Question 4

What are two outcomes of ADOM revisions? (Choose two.)

  • A. ADOM revisions can save the current state of the whole ADOM
  • B. ADOM revisions can save the current state of all policy packages and objects for an ADOM
  • C. ADOM revisions can significantly increase the size of the configuration backups
  • D. ADOM revisions can create System Checkpoints for the FortiManager configuration
Show Answer
Correct Answer:
  • B. ADOM revisions can save the current state of all policy packages and objects for an ADOM
  • C. ADOM revisions can significantly increase the size of the configuration backups
Question 5

Which two items does an FGFM keepalive message include? (Choose two.)

  • A. FortiGate uptime
  • B. FortiGate license information
  • C. FortiGate configuration checksum
  • D. FortiGate IPS version
Show Answer
Correct Answer:
  • C. FortiGate configuration checksum
  • D. FortiGate IPS version
Question 6

An administrator enabled workspace mode and now wants to delete an address object that is currently referenced in a firewall policy. Which two results can the administrator expect to happen? (Choose two.)

  • A. FortiManager will temporarily change the status of the referenced firewall policy
  • B. FortiManager will disable the status of the address object
  • C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy
  • D. FortiManager will not allow the administrator to delete a referenced address object until the ADOM is locked
Show Answer
Correct Answer:
  • C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy
  • D. FortiManager will not allow the administrator to delete a referenced address object until the ADOM is locked
Question 7

Which two settings are required for FortiManager Management Extension Applications (MEA)? (Choose two.)

  • A. You must create an MEA special policy on FortiManager using the super user profile
  • B. You must open the ports to the Fortinet registry
  • C. When you configure MEA, you must open TCP or UDP port 540
  • D. The administrator must have the super user profile
Show Answer
Correct Answer:
  • B. You must open the ports to the Fortinet registry
  • D. The administrator must have the super user profile
Question 8

In the event that one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?

  • A. The FortiManager HA state transition is transparent to administrators and does not require any reconfiguration
  • B. Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device
  • C. Reconfigure the primary device to remove the peer IP of the failed device
  • D. Reboot the failed device to remove its IP from the primary device
Show Answer
Correct Answer:
C. Reconfigure the primary device to remove the peer IP of the failed device
Question 9

You are moving managed FortiGate devices from one ADOM to a new ADOM. Which statement correctly describes the expected result?

  • A. The shared device settings will be installed automatically
  • B. Any unused objects from a previous ADOM are moved to the new ADOM automatically
  • C. The shared policy package will not be moved to the new ADOM
  • D. Policy packages will be imported into the new ADOM automatically
Show Answer
Correct Answer:
C. The shared policy package will not be moved to the new ADOM
Question 10

An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

  • A. When a new policy package is created, the administrator must import the global policy package to ADOM1
  • B. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package
  • C. When a new policy package is created, the administrator must assign the global policy package from the global ADOM
  • D. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package
Show Answer
Correct Answer:
B. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package

NSE5_FMG-7.2 sample questions FAQ

Are these NSE5_FMG-7.2 sample questions from the real exam?

No. They are original practice questions written to match the format and topic mix of the Fortinet NSE 5 - FortiManager 7.2 exam, which contains around 35 questions. Treat them as representative practice, not leaked exam content.

How many free NSE5_FMG-7.2 sample questions do I get?

This page includes 10 questions, each with its correct answer you can reveal in place. The full study PDF expands that to 34+ questions.

Do the sample questions include the correct answers?

Yes. Open the answer panel under each question to see which option is correct. Answer first, then reveal, so the set works as a self-check rather than a reading exercise.

Is 10 sample questions enough to pass the NSE5_FMG-7.2?

Not on its own. Use the samples to find weak topics, revise them against the official domains, then work through the full 34+ question set under timed conditions before booking the exam.

Aced these? Get the Full Exam

Download the complete NSE5_FMG-7.2 study bundle with 34+ questions in a single printable PDF.