FCP_FMG_AD-7.4 practice questions 1–10

1. Question 1 · 60 in bank

   Select 2

   Refer to the exhibit.

   

   Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

   • AAn administrator can also lock the Local-FortiGate_root policy package.
   • BFortiManager is in workflow mode.
   • CThe FortiManager ADOM is locked by the administrator.
   • DThe FortiManager ADOM workspace mode is set to Normal.

   Show answer

   Answer: AD

   Next question

2. Question 2 · 60 in bank

   Select 2

   Refer to the exhibit.

   

   Given the configuration shown in the exhibit, which two conclusions can you draw from the installation targets in the Install On column? (Choose two.)

   • APolicy seq.# 3 will be installed on all managed devices and VDOMs that are listed under Installation Targets.
   • BPolicy seq.# 3 will be skipped because no installation targets are specified.
   • CPolicy seq.# 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target.
   • DPolicy seq.# 1 will be installed on the ISFW device root[NAT] and Student[NAT] VDOMs only.

   Show answer

   Answer: AD

   Next question

3. Question 3 · 60 in bank

   What will be the result of reverting to a previous revision version in the revision history?

   • AIt will install configuration changes to managed device automatically.
   • BIt will tag the device settings status as Auto-Update.
   • CIt will modify the device-level database.
   • DIt will generate a new version ID and remove all other revision history versions.

   Show answer

   Answer: C

   Explanation

   A is false cuz this is the install wizard or quick install purpose B is false cuz auto-update is made by settings changed directly on managed device D is definitely not correct

   Source: Adapted from community discussion — LAFNELL

   Next question

4. Question 4 · 60 in bank

   An administrator wants to create a policy on an ADOM that is in backup mode and install it on a FortiGate device in the same ADOM. How can the administrator perform this task?

   • AThe administrator must use the Policy & Objects section to create a policy first.
   • BThe administrator must use a FortiManager script.
   • CThe administrator must disable the FortiManager offline mode first.
   • DThe administrator must change the ADOM mode to Advanced to bring the FortiManager online.

   Show answer

   Answer: B

   Explanation

   A is false, as no conf changes possible using policy package panel when in backup mode C is false, as there is no relationship between offline mode and this case D is false as no relationship here too

   Source: Adapted from community discussion — LAFNELL

   Next question

5. Question 5 · 60 in bank

   Refer to the exhibit.

   

   What can you conclude from the failed installation log shown in the exhibit?

   • APolicy ID 2 is installed in the disabled state.
   • BPolicy ID 2 is installed without the remote user student.
   • CPolicy ID 2 will not be installed.
   • DPolicy ID 2 is installed without a source address.

   Show answer

   Answer: B

   Next question

6. Question 6 · 60 in bank

   In the event that one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?

   • AThe FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.
   • BReboot the failed device to remove its IP from the primary device.
   • CManually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.
   • DReconfigure the primary device to remove the peer IP of the failed device.

   Show answer

   Answer: D

   Next question

7. Question 7 · 60 in bank

   An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package, Fortinet, in the custom ADOM1. What happens to the Fortinet policy package when it is created?

   • AYou must assign the global policy package from the global ADOM.
   • BThe global policy package is automatically assigned.
   • CYou must reapply the global policy package to ADOM1.
   • DYou can select the option to assign the global policies.

   Show answer

   Answer: B

   Next question

8. Question 8 · 60 in bank

   An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?

   • AIt allows administrative access to FortiManager.
   • BIt allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.
   • CIt allows third-party applications to gain read/write access to FortiManager.
   • DIt allows FortiManager to determine the connection status of managed devices.

   Show answer

   Answer: B

   Next question

9. Question 9 · 60 in bank

   Refer to the exhibit.

   

   A junior administrator is troubleshooting a FortiManager connectivity issue that is occurring with a managed FortiGate device. Given the FortiManager device manager settings shown in the exhibit, what can you conclude from this scenario?

   • AThe administrator must refresh the device to restore connectivity.
   • BFortiManager lost internet connectivity, therefore, the device appears to be down.
   • CThe administrator can reclaim the FortiGate to FortiManager protocol (FGFM) tunnel to get the device online.
   • DThe administrator recently restored a FortiManager configuration file.

   Show answer

   Answer: D

   Next question

10. Question 10 · 60 in bank

    Select 2

    Refer to the exhibit.

    

    You are using the Quick Install option to install configuration changes on the managed FortiGate. Which two statements correctly describe the result? (Choose two.)

    • AIt installs provisioning template changes on the FortiGate device.
    • BIt provides the option to preview only the policy package changes before installing them.
    • CIt installs all the changes in the device database first and the administrator must reinstall the changes on the FortiGate device.
    • DIt installs device-level changes on the FortiGate device without launching the Install Wizard.

    Show answer

    Answer: AD

    Explanation

    A&D are correct B&C are false, With Quick install no preview before the installation of changes, nothing to do on the managed device

    Source: Adapted from community discussion — LAFNELL

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FMG_AD-7.4 practice, question 1. 60 questions available.