FCP_FMG_AD-7.6 practice questions 41–50

1. Question 41 · 62 in bank

   Which FortiGate configuration settings is part of an ADOM-level database on FortiManager?

   • ANSX-T service template
   • BSecurity template
   • CRouting
   • DSNMP

   Show answer

   Answer: B

   Next question

2. Question 42 · 62 in bank

   A FortiManager administrator has moved a FortiGate device to a new ADOM, but they cannot see the policy or object configurations for that FortiGate. What should the administrator do to see the policy or object configurations?

   • AUse ADOM shared objects to restore all missing data.
   • BReset the device and add it to the new ADOM again.
   • CImport the policy package manually using the Import Configuration wizard.
   • DUse ADOM sync to restore the missing configurations.

   Show answer

   Answer: C

   Next question

3. Question 43 · 62 in bank

   An administrator sees that the policy package status of HQ-NGFW-1 is Never Installed. What can you conclude from this status?

   • AThe policy package was never imported to the revision history after HQ-NGFW-1 was registered on FortiManager.
   • BThe policies have not yet been retrieved from the HQ-NGFW-1 device-level database of FortiManager.
   • CThe firewall policies exist only in the HQ-NGFW-1 device-level database, and no policy package has been assigned to the firewall.
   • DThe firewall policies were created or changed in the ADOM, and they need to be installed on the managed HQ-NGFW-1 for the first time.

   Show answer

   Answer: D

   Next question

4. Question 44 · 62 in bank

   Refer to the exhibit.

   

   How does FortiManager get antivirus and IPS updates?

   • AIt uses all URLs in the list that contain the fds host name.
   • BIt gets updates from the server with IP address 10.0.1.50.
   • CIt connects to all servers marked as FortiGuard Distribution Network through Internet (FDNI) sources.
   • DIt connects to the public FortiGuard servers listed in the configuration.

   Show answer

   Answer: B

   Next question

5. Question 45 · 62 in bank

   An administrator upgrades FortiManager with workspace mode (per ADOM) enabled to the latest version but notices that the ADOM versions did not change. Why were the ADOMs not upgraded?

   • AThe administrator did not run the database integrity check before performing the upgrade.
   • BFortiManager does not automatically upgrade ADOMs after a firmware upgrade.
   • CA FortiManager process task is stuck and blocking the ADOM upgrade, so the administrator must fix it.
   • DA user had all ADOMs locked before the upgrade, which stopped them from being upgraded.

   Show answer

   Answer: B

   Next question

6. Question 46 · 62 in bank

   Select 2

   What are two expected results when both FortiManager and FortiGate are behind network address translation (NAT) devices? (Choose two.)

   • ADuring discovery, the FortiManager NATed IP address is not set by default on FortiGate.
   • BFortiGate is discovered by FortiManager through the FortiGate NATed IP address.
   • CIf the FortiGate-FortiManager communication protocol (FGFM) tunnel is torn down, FortiManager will try to reestablish the FGFM tunnel.
   • DFortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.

   Show answer

   Answer: AB

   Next question

7. Question 47 · 62 in bank

   Select 2

   Refer to the exhibit.

   

   Which two actions will occur if you run the script using the Remote FortiGate Directly (via CLI) option? (Choose two.)

   • AFortiManager will provide a preview of CLI commands before executing this script on a managed FortiGate.
   • BFortiManager will create a new revision history.
   • CFortiGate will auto-updated the FortiManager device-level database.
   • DYou will have to install these changes using the Install Wizard.

   Show answer

   Answer: BC

   Next question

8. Question 48 · 62 in bank

   Refer to the exhibits.

   

   

   

   What can you conclude, based on the configuration shown in the exhibit?

   • APolicy sequence #1 will be installed on the internal segmentation firewall (ISFW) device root [NAT] and Trainer [NAT] VDOMs.
   • BPolicy sequence #3 must have devices or VDOMs listed in the Install On column; otherwise, it will cause errors.
   • CThe global policy package will be added to the top of the ISFW policy package.
   • DThe administrator needs to retrieve the Local-FortiGate configuration to sync with the Security Fabric group, Training.

   Show answer

   Answer: C

   Next question

9. Question 49 · 62 in bank

   Select 2

   An administrator created a new global policy package that includes both header policies and footer policies. What two things must the administrator know before deploying the global policy package to ADOM2? (Choose two.)

   • AThey can synchronize policy packages by importing from the ADOM2 policy package into the global ADOM policy package.
   • BThey can promote ADOM2 objects to global objects.
   • CThey can assign the global policy package to all or selected policy packaged within ADOM2.
   • DThey must install from the ADOM2 layer to FortiGate when using the Automatically install policies to ADOM devices option.

   Show answer

   Answer: BC

   Next question

10. Question 50 · 62 in bank

    Select 2

    Which two statements about the integrity of databases on FortiManager are correct? (Choose two.)

    • AScheduled backups run database integrity commands automatically.
    • BThe diagnose dvm check-integrity command attempts to fix a corrupted file system.
    • CThe diagnose cdb check adom-integrity command can correct issues related to locked devices.
    • DYou should fix all database integrity issues before performing a script.
    • ENot following the correct upgrade path may cause inconsistencies in the databases.

    Show answer

    Answer: AE

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FMG_AD-7.6 practice, question 41. 62 questions available.