FCP_FMG_AD-7.4 practice questions 21–30

1. Question 21 · 60 in bank

   What must you consider before deciding to use FortiManager to manage a FortiAnalyzer device?

   • AConfirm that FortiManager has enough storage capacity for the expected logs.
   • BEnsure that FortiAnalyzer features are installed in advance.
   • CCheck whether FortiManager is part of a high availability (HA) cluster.
   • DDetermine whether the VDOMs of the same FortiGate will be assigned to different ADOMs.

   Show answer

   Answer: D

   Explanation

   D is correct. When FMG is managing a FAZ, you cannot switch to advanced mode. And it s only in advanced mode Vdoms of the same Fortigate can be assigned to differents ADOM

   Source: Adapted from community discussion — LAFNELL

   Next question

2. Question 22 · 60 in bank

   What is the purpose of ADOM revisions?

   • ATo save the current state of the whole ADOM
   • BTo save the current state of all policy packages and objects for an ADOM
   • CTo revert individual policy packages and device-level settings for a managed FortiGate
   • DTo save the FortiManager configuration in the System Checkpoints

   Show answer

   Answer: B

   Next question

3. Question 23 · 60 in bank

   Refer to the exhibit.

   

   An administrator is about to add the FortiGate device to FortiManager using the discovery process. FortiManager is operating behind a NAT device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings. What is the expected result?

   • ADuring discovery, FortiManager uses only the FortiGate serial number to establish the connection.
   • BDuring discovery, FortiManager sets both the FortiManager NATed IP address and NAT device IP address on FortiGate.
   • CDuring discovery, FortiManager sets the NATed device IP address on FortiGate.
   • DDuring discovery, FortiManager sets the FortiManager NATed IP address on FortiGate.

   Show answer

   Answer: D

   Next question

4. Question 24 · 60 in bank

   An administrator is in the process of copying a system template profile between ADOMs by running the following command: execute fmprofile import-profile ADOM2 3547 /tmp/myfile Where does this command import the system template profile from?

   • AFortiManager file system
   • BADOM2 object database
   • CADOM2 device database
   • DSource ADOM policy database

   Show answer

   Answer: A

   Explanation

   Answer is A. From user Satekhi under the NSE5_FMG-7.2 topic, same question: "The command in question is execute fmprofile import-profile ADOM2 3547 /tmp/myfile. If the administrator is importing the system template profile into ADOM2, and considering each ADOM has a unique object database, the file is likely being imported from the FortiManager file system. ~ FMG 7.2 p109"

   Source: Adapted from community discussion — InvOpinion

   Next question

5. Question 25 · 60 in bank

   Which API method is used to create objects or overwrite existing ones?

   • ASet
   • BAdd
   • CExec
   • DUpdate

   Show answer

   Answer: A

   Next question

6. Question 26 · 60 in bank

   What is a characteristic of the FortiManager high availability (HA) feature?

   • AWhen a secondary unit is removed, FortiManager updates the managed devices using TCP port 5199.
   • BThe primary unit synchronizes all configuration revision with the secondary units.
   • CAll secondary units must be in the same network as the primary unit.
   • DEach cluster member must be upgraded manually, starting with the primary unit.

   Show answer

   Answer: B

   Next question

7. Question 27 · 60 in bank

   Select 2

   Which two items are included in the FortiManager backup? (Choose two.)

   • AAll devices
   • BFirmware images
   • CFortiGuard database
   • DFlash configuration

   Show answer

   Answer: AD

   Next question

8. Question 28 · 60 in bank

   Select 2

   Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

   • AThe Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices.
   • BThe Security Fabric settings are part of the device-level settings.
   • CThe Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices.
   • DThe Security Fabric license, group name, and password are required for the FortiManager Security Fabric integration.

   Show answer

   Answer: BC

   Next question

9. Question 29 · 60 in bank

   An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

   • AWhen creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package.
   • BWhen a new policy package is created, the administrator must assign the global policy package from the global ADOM.
   • CWhen a new policy package is created, the administrator must import the global policy package to ADOM1.
   • DWhen the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

   Show answer

   Answer: D

   Explanation

   I will go for D Supposing when the global pp is assigned to ADOM, the default option assign to all PP in the ADOM is let checked.

   Source: Adapted from community discussion — LAFNELL

   Next question

10. Question 30 · 60 in bank

    Refer to the exhibit.

    

    An administrator created two new meta fields in FortiManager. Which operation can be performed with these parameters?

    • AYou can invoke them using the $ character.
    • BYou can add them to objects as custom attributes.
    • CYou can export them to be used in other ADOMs.
    • DYou can use them as variables in scripts.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FMG_AD-7.4 practice, question 21. 60 questions available.