FCP_FMG_AD-7.6 practice questions 1–10

1. Question 1 · 62 in bank

   Refer to the exhibit.

   

   If the monitored interface for the primary FortiManager device fails, what must you do to maintain high availability (HA)?

   • AThe FortiManager HA failover is transparent to administrators and does not require any additional action.
   • BManually promote one of the working secondary devices to the primary role: and reboot the original primary device to remove the peer IP address of the failed device.
   • CReconfigure the primary device to remove the peer IP address of the failed device from its configuration.
   • DCheck the integrity database of the primary device to force a secondary device to become the new primary with all active interfaces.

   Show answer

   Answer: A

   Next question

2. Question 2 · 62 in bank

   Refer to the exhibit.

   

   An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM. After the installation operation is performed, which IP/netmask will be installed on Remote-Firewall [VDOM1] for the LAN firewall address object?

   • A21.21.2.5/255.255.255.255
   • B172.16.5.20/255.255.255.255
   • C172.16.5.0/255.255.255.0
   • D10.10.10.5/255.255.255.255

   Show answer

   Answer: C

   Next question

3. Question 3 · 62 in bank

   You want to let multiple administrators work in the same ADOM without creating configuration conflicts. What is the best and the most effective solution to apply?

   • AConfigure RADIUS authentication to assign ADOM roles to each user.
   • BEnable workflow mode, which is the only way to prevent concurrent configuration conflicts.
   • CAssign administrators with JSON API access to the FortiManager.
   • DActivate workspace mode in the ADOM settings.

   Show answer

   Answer: D

   Next question

4. Question 4 · 62 in bank

   Refer to the exhibits.

   

   

   An administrator needed to recover all the configurations related to the user, Support. The configurations were saved in configuration revision ID 9. The administrator reverted the configuration using the Configuration Revision History window and received the CLI output shown in the exhibit. What can you conclude from the CLI output?

   • AThe administrator set the flag to 0 to prevent configuration overrides.
   • BThe administrator reinstalled the policy package.
   • CThe administrator needs to retrieve the device to correctly detect the FortiGate firmware version.
   • DThe administrator installed only the device-level configuration.

   Show answer

   Answer: D

   Next question

5. Question 5 · 62 in bank

   An administrator wants to configure and manage multiple objects in the FortiManager database and give access to other users who work in the same database. To stay in control of the changes made to firewall policies by other team members, the administrator needs a setup where all modifications go through a central check before they can be installed. How can the administrator create this setup?

   • AEnable the prompt asking the administrator to accept firewall policies changes before saving.
   • BEnable the workspace (for all ADOMs) to control all changes made by any administrator.
   • CEnable device lock and the advanced mode feature in the ADOM.
   • DEnable workflow mode and the ADOM lock feature.

   Show answer

   Answer: D

   Next question

6. Question 6 · 62 in bank

   Select 2

   Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

   • AWhen FortiManager installs device-level changes on a managed device
   • BWhen changes to the device-level database are made on FortiManager
   • CWhen FortiManager is auto-updated with configuration changes made directly on a managed device
   • DWhen a provisioning template is assigned to a managed device on the device-level database

   Show answer

   Answer: AC

   Next question

7. Question 7 · 62 in bank

   Refer to the exhibits.

   

   

   

   FortiGate HQ-NGFW-1 downloads and validates FortiGuard databases from FortiManager which acts as a local FortiGuard Distribution Server (FDS) in a closed network. An administrator pushes a new firewall policy with an intrusion prevention system (IPS) profile from FortiManager to FortiGate HQ- NGFW-1 However, FortiGate does not recognize the new IPS signature from FortiManager. What is the most likely reason why FortiGate HQ-NGFW-1 does not recognize the new IPS signature?

   • AFortiGate must enable rating for the FortiManager IP address, 192.168.1.120, in server list 1.
   • BFortiManager and FortiGate have different IPS database versions.
   • CThe administrator must enable IPv6 connections for FortiGuard services on FortiManager.
   • DThe administrator must enable the fortiguard-anycast option to correctly download all signatures from the local FDS.

   Show answer

   Answer: B

   Next question

8. Question 8 · 62 in bank

   An administrator has assigned a global policy package to a new ADOM named ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

   • AThe administrator will be able to select the option to assign the global policy package to the new policy package.
   • BFortiManager will automatically assign the global policy package to the new policy package.
   • CFortiManager will automatically install policies on the policy package in ADOM1.
   • DThe administrator will have to assign the global policy package from the global ADOM.

   Show answer

   Answer: B

   Next question

9. Question 9 · 62 in bank

   Which is recommended when you are managing a high volume of logs in your network?

   • AStore logs on FortiManager and use FortiView.
   • BAdd and manage FortiAnalyzer from FortiManager.
   • CEnable advanced ADOM mode on FortiManager.
   • DForward logs from FortiAnalyzer to FortiManager daily.

   Show answer

   Answer: B

   Next question

10. Question 10 · 62 in bank

    What is the best explanation of how FortiManager helps with mass provisioning?

    • AIt upgrades the OS of each FortiGate device.
    • BIt provides local FortiGuard Distribution Server (FDS) services to the network.
    • CIt uses templates to configure the same settings on many devices simultaneously.
    • DIt sends email alerts when new devices connect.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FMG_AD-7.6 practice, question 1. 62 questions available.