FCP_FMG_AD-7.4 practice questions 41–50

1. Question 41 · 60 in bank

   Select 2

   Which two statements about scheduled backups on FortiManager are true? (Choose two.)

   • AThey back up all devices and the FortiGuard database.
   • BThey can be configured using the CLI and the GUI.
   • CThey put FortiManager in offline mode.
   • DThey support FTP, SCP, and SFTP.

   Show answer

   Answer: BD

   Next question

2. Question 42 · 60 in bank

   Select 2

   Which two statements about the integrity of databases on FortiManager are correct? (Choose two.)

   • AThe diagnose dvm check-integrity command attempts to fix a corrupted file system.
   • BScheduled backups run database integrity commands automatically.
   • CNot following the correct upgrade path may cause inconsistencies in the databases.
   • DYou should fix all database integrity issues before performing a backup.
   • EThe diagnose cdb check adom-integrity command can correct issues related to looked devices.

   Show answer

   Answer: BC

   Explanation

   B: it's OK from study guide p261: FortiManager automatically runs database integrity commands prior to a schedule backup and creates logs C: it' OK from study guide p260: Always follow the correct upgrade path. If you don’t, it may cause inconsistencies in the databas D: it's wrong. from study guide p261: It is recommended that you perform a backup before executing database integrity commands.

   Source: Adapted from community discussion — aa0v1snjr9

   Next question

3. Question 43 · 60 in bank

   Select 2

   If both FortiManager and FortiGate are behind NAT devices, what are the two expected results? (Choose two.)

   • AFortiGate is discovered by FortiManager through the FortiGate NATed IP address.
   • BFortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.
   • CIf the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
   • DDuring discovery, the FortiManager NATed IP address is not set by default on FortiGate.

   Show answer

   Answer: AD

   Explanation

   A&D are correct answers B is incorrect. Fortigate can announce itself to FMG in the case FMG Nated IP address is configured under central management C is incorrect, as in this scenario only Fortigate can try to reestablish the FGFM tunnel when it s torn down. FYI D is correct because of "by default". During discovery process, FMG Nated IP address is set on FGT only if in the FMG admin setting Nated ip address has been specify like mgmt address. FMG Administrator Study Guide

   Source: Adapted from community discussion — LAFNELL

   Next question

4. Question 44 · 60 in bank

   Select 2

   Refer to the exhibit.

   

   Which two statements about the output are true? (Choose two.)

   • AThe latest revision history for the managed FortiGate does not match the device-level database.
   • BConfiguration changes have been installed on FortiGate, which means the FortiGate configuration has been changed.
   • CConfiguration changes directly made on FortiGate have been automatically updated to the device-level database.
   • DThe latest revision history for the managed FortiGate does match the FortiGate running configuration.

   Show answer

   Answer: AD

   Explanation

   A&D are correct. – conf: in sync – This is the sync status which shows that the latest revision history is in sync with Fortigate’s configuration. - There is a new modification on FortiManager device level DB (dev-db: modified) which wasn’t installed to FortiGate (cond: pending)

   Source: Adapted from community discussion — Shashanka

   Next question

5. Question 45 · 60 in bank

   You are moving managed FortiGate devices from one ADOM to a new ADOM. Which statement correctly describes the expected result?

   • AThe shared device settings will be installed automatically.
   • BThe shared policy package will not be moved to the new ADOM automatically.
   • CAny unused objects from a previous ADOM are moved to the new ADOM automatically.
   • DPolicy packages will be imported into the new ADOM automatically.

   Show answer

   Answer: B

   Explanation

   B it's correct From study Guide : When you move devices from one ADOM to another ADOM, shared policy packages and objects do not move to the new ADOM. You will need to import policy packages from managed devices

   Source: Adapted from community discussion — aa0v1snjr9

   Next question

6. Question 46 · 60 in bank

   What does a policy package status of Never Installed indicate?

   • AFortiManager is unable to determine the policy package status.
   • BThe policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager.
   • CThe policy package was never imported after a device was registered on FortiManager.
   • DThe policy configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

   Show answer

   Answer: C

   Next question

7. Question 47 · 60 in bank

   Refer to the exhibit.

   

   In the event that the monitored interface for the primary FortiManager device fails, which action must you perform to return FortiManager high availability (HA) to a working state?

   • AManually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP address of the failed device.
   • BReboot the current primary device to force a secondary device to become the new primary.
   • CThe FortiManager HA failover is transparent to administrators and does not require any additional action.
   • DReconfigure the primary device to remove the peer IP address of the failed device from its configuration.

   Show answer

   Answer: C

   Explanation

   C is correct. No action is required because of VRRP activated on the HA configuration. The Failover will occur automatically once the monitored interface is lost. FMG 7.4 Administrator Study Guide

   Source: Adapted from community discussion — LAFNELL

   Next question

8. Question 48 · 60 in bank

   Refer to the exhibit.

   

   An administrator is importing a new device into FortiManager and has selected the options shown in the exhibit. What will happen if the administrator makes changes and then installs the modified policy package on this managed FortiGate?

   • APolicies not imported prompt a confirmation before being deleted.
   • BPolicies not imported are marked as modified for future import attempts.
   • CPolicies not imported remain untouched on the managed FortiGate.
   • DPolicies not imported are deleted on the managed FortiGate during the installation.

   Show answer

   Answer: D

   Explanation

   Correct Answer: D. The wizard performs a policy search to find all policies in preparation for import into the FortiManager database. You may choose to import all firewall policies, or select specific policies to import. If you choose to import only specific policies into the policy package and later install policy changes, the policies that were not imported will be deleted locally on FortiGate. This is because FortiManager does not have those policies in the policy package. - FortiManager 7.4 Administrator Study Guide - Page No:190

   Source: Adapted from community discussion — Shashanka

   Next question

9. Question 49 · 60 in bank

   Refer to the exhibit.

   

   Given the import report shown in the exhibit, how did FortiManager handle the service category named General?

   • AFortiManager ignored the firewall service category General but created a new service category in its database.
   • BFortiManager ignored the firewall service category General and deleted the duplicate value in its database.
   • CFortiManager ignored the firewall service category General and did not update its database with the value.
   • DFortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.

   Show answer

   Answer: C

   Next question

10. Question 50 · 60 in bank

    Refer to the exhibit.

    

    How will FortiManager try to get updates tor antivirus and IPS?

    • AFrom the list of configured override servers or public FDN servers
    • BFrom the configured override server IP address 10.0.1.50 only
    • CFrom the default server fds1.fortinet.com
    • DFrom public FDNI server IP address with the fourth highest octet only

    Show answer

    Answer: B

    Explanation

    As the server override mode is strict, there is no fallback. FMG will communicate only with server configure in override server list.

    Source: Adapted from community discussion — LAFNELL

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FMG_AD-7.4 practice, question 41. 60 questions available.