FCP_FMG_AD-7.6 practice questions 51–60

1. Question 51 · 62 in bank

   Select 2

   What are two outcomes of ADOM revisions? (Choose two.)

   • AADOM revisions can save the current state of the entire ADOM.
   • BADOM revisions do not increase the size of configuration backups.
   • CADOM revisions can save the current state of all policy packages and objects for an ADOM.
   • DADOM revisions appear in the Install Policy & Package Settings section of the install wizard.

   Show answer

   Answer: CD

   Next question

2. Question 52 · 62 in bank

   A FortiManager administrator opens the revision history and choose to revert to a previous version. What will this action do to the current device configuration?

   • AIt will trigger an unknown device-level database status, and the administrator will have to import a policy package to sync.
   • BIt will trigger a conflict status if it is using any provisioning template, and the administrator will have to install changes.
   • CIt will revert both configurations: device-level database and policy layer database.
   • DIt will modify the device-level database.

   Show answer

   Answer: D

   Next question

3. Question 53 · 62 in bank

   If one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?

   • AThe FortiManager high availability (HA) state transition is transparent to administrators and does not require any reconfiguration.
   • BRun a sanity check on the failed device to make sure HA heartbeat packets are using TCP port 5199.
   • CManually promote one of the working secondary devices to the primary role.
   • DRemove the peer IP of the failed device on the primary device.

   Show answer

   Answer: D

   Next question

4. Question 54 · 62 in bank

   Refer to the exhibit.

   

   What percentage of the available RAM is being used by the process in charge of downloading the web and email filter databases from the public FortiGuard servers?

   • A1.5
   • B3.1
   • C4.1
   • D2.9

   Show answer

   Answer: D

   Next question

5. Question 55 · 62 in bank

   Refer to the exhibits.

   

   

   Which IP/netmask will be present in the LAN firewall address object on the Remote-Firewall?

   • A172.16.0.0/255.255.255.0
   • B10.0.0.0/255.255.255.0
   • C192.168.1.0/255.255.255.0
   • D172.16.10.0/255.255.255.0

   Show answer

   Answer: B

   Next question

6. Question 56 · 62 in bank

   Refer to the exhibits.

   

   

   An administrator added BR1-FGT-1 to FortiManager and started importing the policy package. During the process, they saw that they need to choose values from FortiGate or FortiManager. Which conclusion is most clearly supported by the exhibits?

   • ABR1-FGT-1 does not support the SSL/SSH profile with HTTPS on port 443.
   • BThe administrator must match the FortiOS firmware version with the FortiManager ADOM firmware version to resolve the conflict status.
   • CThe default Firewall Profile-Protocol-Options object is the only profile that does not significantly affect any configuration changes on either FortiManager or FortiGate.
   • DFortiManager has a different FortiGuard database compared to FortiGate BR1-FGT-1 for the QUIC protocol.

   Show answer

   Answer: C

   Next question

7. Question 57 · 62 in bank

   Select 2

   Refer to the exhibit.

   

   What are two results from the configuration shown in the exhibit? (Choose two.)

   • AThe same administrator can lock more than one ADOM at the same time.
   • BMultiple administrators can lock and work on separate AOMs at the same time.
   • CAll changes must be approved before they can be installed on a device.
   • DConcurrent read-write access to an ADOM is disabled.

   Show answer

   Answer: BD

   Next question

8. Question 58 · 62 in bank

   Refer to the exhibit.

   

   An administrator has assigned the default system template to install all devices with the FortiAnalyzer IP address 10.0.13.12. However, not all FortiGate devices can reach FortiAnalyzer using the default interface. Some devices may use the LAN interface, while others may use the WAN interface. How can the administrator change the source interface for FortiGate devices using the default system template?

   • AUse per-device dynamic object configurations at the ADOM level and apply them in the template.
   • BConfigure a metadata variable at the ADOM level and use it in the template.
   • CCreate a different system template for each FortiGate, if the configuration is different.
   • DCreate a meta field on FortiManager system settings of type Device and use it in the template.

   Show answer

   Answer: B

   Next question

9. Question 59 · 62 in bank

   Refer to the exhibit.

   

   Which statement about the environment shown in the exhibit is true?

   • AYou must restart the secondary device if you promote it to primary.
   • BNo FortiGuard packages have been synchronized between the cluster member.
   • CA failover will take place after five minutes without receiving heartbeat packets.
   • DFortiAnalyzer features are not enabled on this FortiManager device.

   Show answer

   Answer: D

   Next question

10. Question 60 · 62 in bank

    Refer to the exhibit.

    

    What can you conclude from the failed installation log shown in the exhibit?

    • APolicy ID 2 is installed in the disabled state.
    • BPolicy ID 2 will not be installed.
    • CPolicy ID 2 is installed without a source address.
    • DPolicy ID 2 is installed without the remote user student.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FMG_AD-7.6 practice, question 51. 62 questions available.