FCP_FMG_AD-7.4 practice questions 51–60

1. Question 51 · 60 in bank

   When using the FortiManager JSON API, what is the purpose of the session ID received after successful authentication?

   • AIt is used to identify the FortiManager metadata on the client.
   • BIt includes a hash to check the integrity of the JSON response sent by FortiManager.
   • CIt contains information about the HTTP request method used.
   • DIt serves as an authentication token for subsequent API requests.

   Show answer

   Answer: D

   Next question

2. Question 52 · 60 in bank

   An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session. What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

   • ATrainer is not a part of workflow approval group.
   • BTrainer must close Student's workflow session before approving the request.
   • CTrainer must first create their own workflow session to approve student session.
   • DTrainer does not have full rights over this ADOM.

   Show answer

   Answer: A

   Explanation

   A is correct. having super_role is not sufficient to approve changes made by other administrator. The administrator should have been added to approval group.

   Source: Adapted from community discussion — LAFNELL

   Next question

3. Question 53 · 60 in bank

   Select 2

   Refer to the exhibit.

   

   What will happen if the script is run using the Remote FortiGate Directly (via CLI) option? (Choose two.)

   • AFortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.
   • BFortiManager will create a new revision history.
   • CFortiGate will auto-update the FortiManager device-level database.
   • DYou must install these changes using the Install Wizard.

   Show answer

   Answer: BC

   Explanation

   When running a script with the option Remote FortiGate Directly (through the CLI) it will be executed directly on the device. A. Wrong. No option is provided to preview the configuration changes through FortiManager prior to executing it. B. Correct C. Correct D. Wrong. Don’t need to install the changes using the installation wizard

   Source: Adapted from community discussion — 79fad4e

   Next question

4. Question 54 · 60 in bank

   Refer to the exhibit.

   

   An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM. After the installation operation is performed, which IP/netmask will be installed on Local-FortiGate for the LOCAL_SUBNET firewall address object?

   • A192.168.1.0/24
   • BLocal-FortiGate automatically chooses an IP/netmask based on its network interface settings.
   • CIt will create two firewall address objects on Local-FortiGate with 192.168.1.0/24 and 10.0.5.0/24 values.
   • D10.0.5.0/24

   Show answer

   Answer: A

   Next question

5. Question 55 · 60 in bank

   Select 2

   Refer to the exhibit.

   

   Given the configuration shown in the exhibit, what are two results from this configuration? (Choose two.)

   • AYou can validate administrator login attempts through external servers.
   • BThe same administrator can lock more than one ADOM at the same time.
   • CTwo or more administrators can make configuration changes at the same time, in the same ADOM.
   • DConcurrent read-write access to an ADOM is disabled.

   Show answer

   Answer: BD

   Explanation

   Workspace mode for all adoms means that only a single admin can update an ADOM at the same time. However, nothing forbids an admin to lock several ADOMs... https://docs.fortinet.com/document/fortimanager/7.4.1/administration-guide/302496/workspace-mode https://docs.fortinet.com/document/fortimanager/7.4.1/administration-guide/908521/enable-workspace-mode

   Source: Adapted from community discussion — MaDeInBe

   References

   • Fortinet documentation
   • Fortinet documentation

   Next question

6. Question 56 · 60 in bank

   Refer to the exhibit.

   

   According to the error message, why is FortiManager failing to add the FortiAnalyzer device?

   • AThe administrator must use the correct user name and password of the FortiAnalyzer device.
   • BThe administrator must turn off the Use Legacy Device login and add the FortiAnalyzer device to the same network as FortiManager.
   • CThe administrator must select the FortiManager administrative access checkbox on the FortiAnalyzer management interface.
   • DThe administrator must use the Add Model Device section and discover the FortiAnalyzer device.

   Show answer

   Answer: C

   References

   • Fortinet documentation

   Next question

7. Question 57 · 60 in bank

   Select 2

   Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

   • AWhen changes to the device-level database are made on FortiManager
   • BWhen FortiManager is auto-updated with configuration changes made directly on a managed device
   • CWhen a configuration revision is reverted to a previous revision in the revision history
   • DWhen FortiManager installs device-level changes on a managed device

   Show answer

   Answer: BD

   Next question

8. Question 58 · 60 in bank

   Which statement about the policy lock feature on FortiManager is true?

   • APolicy locking is available in workspace normal mode.
   • BLocking a policy takes precedence over a locked ADOM.
   • CWhen a policy is locked, the ADOM that contains it is also locked.
   • DAdministrators in the approval group can work concurrently on a locked policy.

   Show answer

   Answer: A

   Explanation

   If you want to modify a policy, you don't need to lock the entire policy package. Once you lock a policy, a padlock icon appears beside the policy. Others are now unable to modify your policy or lock the policy package where the locked policy is in, and unable to lock the ADOM.

   Source: Adapted from community discussion — MaDeInBe

   Next question

9. Question 59 · 60 in bank

   Select 2

   Refer to the exhibit.

   

   An administrator would like to create three ADOMs on FortiManager with different access levels based on departments. What two conclusions can you draw from the design shown in the exhibit? (Choose two.)

   • AThe FortiManager administrator must set the ADOM device mode to Advanced.
   • BPolicies and objects databases can be shared between the Financial and HR ADOMs.
   • CAn administrator with the super user profile can access all the VDOMs.
   • DThe administrator must configure FortiManager in workspace normal mode.

   Show answer

   Answer: AC

   Explanation

   A is obviously required to split VDOMs over several ADOMs B is not true D is not asked (locking ADOM etc is not required) so C is the other valid reply

   Source: Adapted from community discussion — MaDeInBe

   Next question

10. Question 60 · 60 in bank

    Select 2

    Which two items does an FGFM keepalive message include? (Choose two.)

    • AFortiGate IPS version
    • BFortiGate license information
    • CFortiGate configuration checksum
    • DFortiGate uptime

    Show answer

    Answer: AC

    Explanation

    You are right ! "The keep-alive message contains information that assists the FortiManager in managing the FortiGate unit, such as current OS version, platform, configuration checksum and versions of the unit’s AV and IPS databases." - Communications Protocol Guide FortiGate / FortiManager 7.4 page 6.

    Source: Adapted from community discussion — dadolphe

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FMG_AD-7.4 practice, question 51. 60 questions available.