FCP_FMG_AD-7.4 practice questions 31–40

1. Question 31 · 60 in bank

   An administrator runs the reload failure command diagnose test deploymanager reloadconf <deviceid> on FortiManager. What does this command do?

   • AIt compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.
   • BIt downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.
   • CIt reloads the policy package from the FortiManager to FortiGate.
   • DIt installs the latest configuration on the specified FortiGate and updates the revision history database.

   Show answer

   Answer: B

   Next question

2. Question 32 · 60 in bank

   What happens if you create an ADOM with version 7.2, add FortiGate devices running FortiOS 7.2, and then upgrade the FortiGate devices to FortiOS 7.4?

   • AThe ADOM can concurrently manage FortiGate devices running different firmware versions.
   • BAdding higher version FortiGate devices to a lower version ADOM triggers an automatic ADOM upgrade.
   • CThe ADOM restricts access to devices running lower firmware versions.
   • DUpgrading the FortiGate devices to FortiOS 7.4 may result in ADOM database corruption.

   Show answer

   Answer: A

   Next question

3. Question 33 · 60 in bank

   Refer to the exhibit.

   

   An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM. After the installation operation is performed, which IP/netmask is shown on FortiManager for this firewall address object for devices without a Per-Device Mapping set?

   • AFortiManager generates an error for each FortiGate without a per-device mapping defined for that object.
   • B192.168.1.0/24
   • C192.168.1.0/28
   • DFortiManager replaces the address object to none.

   Show answer

   Answer: B

   Explanation

   A is false C is false, that s the value only for Local-Fortigate which has a per-device mapping D is false because the none object is used in the case where Fortimanager installs on a device an object which has been previously deleted answer is B

   Source: Adapted from community discussion — LAFNELL

   Next question

4. Question 34 · 60 in bank

   Refer to the exhibit.

   

   A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM, which has four policy packages. The customer administrator has access only to My_ADOM. How can the customer or service provider administrators remove the global header policy from the policy package named Shared_Package?

   • AThe service provider administrator can unassign the global policy from My_ADOM.
   • BThe customer administrator can unassign the global policy from My_ADOM.
   • CThe customer administrator can unassign the policy by locking My_ADOM.
   • DThe service provider administrator can unassign the policy from the global ADOM.

   Show answer

   Answer: D

   Next question

5. Question 35 · 60 in bank

   Select 2

   Refer to the exhibit.

   

   Given the configuration shown in the exhibit, what are two results from this configuration? (Choose two.)

   • AUnlocking an ADOM will submit configuration changes automatically to the approval administrator.
   • BUngraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.
   • CUnlocking an ADOM will install configuration changes automatically on managed devices.
   • DThe same administrator can lock more than one ADOM at the same time.

   Show answer

   Answer: BD

   Next question

6. Question 36 · 60 in bank

   When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

   • AFortiManager will not push the CLI commands as part of the installation that will cause the tunnel to go down.
   • BAfter 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
   • CFortiManager will revert and install a previous configuration revision on the managed FortiGate.
   • DFortiGate will reject the CLI commands that will cause the tunnel to go down.

   Show answer

   Answer: B

   Next question

7. Question 37 · 60 in bank

   Select 2

   What are two outcomes of ADOM revisions? (Choose two.)

   • AADOM revisions can create System Checkpoints for the FortiManager configuration.
   • BADOM revisions can save the current state of the whole ADOM.
   • CADOM revisions can significantly increase the size of the configuration backups.
   • DADOM revisions can save the current state of all policy packages and objects for an ADOM.

   Show answer

   Answer: CD

   Explanation

   C & D are the correct answers A & B are not correct, cuz ADOM revisions are not linked to FMG configuration, and does not contain ADOM settings

   Source: Adapted from community discussion — LAFNELL

   Next question

8. Question 38 · 60 in bank

   Refer to the exhibit.

   

   Which statement about the environment shown in the exhibit is correct?

   • AYou must restart the secondary unit if you promote it to become the primary.
   • BA failover will take place after five minutes without receiving heartbeat packets.
   • CFortiAnalyzer features are not enabled on this FortiManager device.
   • DNo FortiGuard packages have been synchronized between the cluster members yet.

   Show answer

   Answer: C

   Explanation

   FortiManager 7.4 Administrator Study Guide page 11 lf FortiAnalyzer features are enabled, you cannot add FortiAnalyzer to FortiManager. You will also not be able to configure FortiManager high availability (HA)

   Source: Adapted from community discussion — eamstar

   Next question

9. Question 39 · 60 in bank

   An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators. How should the workspace mode settings be configured on FortiManager?

   • ASet to workspace and using the policy locking feature
   • BSet to read/write and using the policy locking feature
   • CSet to workflow and using the ADOM locking feature
   • DSet to normal and using the approval group feature

   Show answer

   Answer: C

   Next question

10. Question 40 · 60 in bank

    An administrator created a new ADOM named Training for FortiGate devices only, and added the root FortiGate device of a Security Fabric group to the Training ADOM. Given the administrator's actions, which statement correctly describes the expected result for the downstream devices in the Security Fabric?

    • AThe downstream devices show as unauthorized in the Training ADOM.
    • BThe downstream devices are automatically authorized.
    • CThe downstream devices will appear in the root ADOM.
    • DThe downstream devices must be added using the Add Device wizard.

    Show answer

    Answer: A

    Explanation

    correct answer is A, as the root fortigate is already added in Training ADOM. All downstream fortigate in the sec fabric group will be added in unauthorized devices group in the same ADOM as the root.

    Source: Adapted from community discussion — LAFNELL

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FMG_AD-7.4 practice, question 31. 60 questions available.