Fortinet FCP_FMG_AD-7.4 Online Practice Questions and Exam Preparation

Fortinet FCP_FMG_AD-7.4 Online Questions & Answers

• Question 11:

  Refer to the exhibit which shows the Download Import Report.

  

  Why is FortiManager failing to import firewall policy ID 1?

  A. Policy ID 1 is configured from the interface any to port6. FortiManager rejects the request to import this policy because the any interface does not exist on FortiManager
  B. Policy ID 1 for this managed FortiGate already exists on FortiManager in the policy package named Remote-FortlGate.
  C. Policy ID 1 has an address object that already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.
  D. Policy ID 1 does not have the ADOM Interface mapping configured on FortiManager.
  C. Policy ID 1 has an address object that already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.

• Question 12:

  Push updates are failing on a FortiGate device that is located behind a NAT device. Which two settings should the administrator check? (Choose two.)

  A. That the override server IP address is set on FortiManager and the NAT device
  B. That the external IP address on the NAT device is set to DHCP and configured with the virtual IP
  C. That the NAT device IP address and correct ports are configured on FortiManager
  D. That the virtual IP address and correct ports are set on the NAT device
  C. That the NAT device IP address and correct ports are configured on FortiManager
  D. That the virtual IP address and correct ports are set on the NAT device

• Question 13:

  What is the purpose of ADOM revisions?

  A. To save the current state of the whole ADOM
  B. To save the current state of all policy packages and objects for an ADOM
  C. To revert individual policy packages and device-level settings for a managed FortiGate
  D. To save the FortiManager configuration in the System Checkpoints
  B. To save the current state of all policy packages and objects for an ADOM

• Question 14:

  Which statement about the upgrade of ADOMs on FortiManager is true?

  A. To ensure database consistency, you must upgrade an ADOM before you upgrade the devices in it.
  B. Upgrading the FortiManager version upgrades all existing ADOMs automatically.
  C. You cannot import policies from a device until its FortiOS version matches the ADOM version.
  D. ADOMs using global objects can be upgraded before or after upgrading the global database ADOM.
  C. You cannot import policies from a device until its FortiOS version matches the ADOM version.

• Question 15:

  Which configuration setting for FortiGate is part o an ADOM-level database on FortiManager?

  A. NSX-T Service Template
  B. Routing
  C. SNMP
  D. Security profiles
  B. Routing

• Question 16:

  Refer to the exhibit.

  

  What will happen if the script is run using theRemote FortiGate Directly (via CLI)option? (Choose two.)

  A. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.
  B. FortiManager will create a new revision history.
  C. FortiGate will auto-update the FortiManager device-level database.
  D. You must install these changes using the Install Wizard.
  B. FortiManager will create a new revision history.
  C. FortiGate will auto-update the FortiManager device-level database.

• Question 17:

  What must you consider before deciding to use FortiManager to manage a FortiAnalyzer device?

  A. Confirm that FortiManager has enough storage capacity for the expected logs.
  B. Ensure that FortiAnalyzer features are installed in advance.
  C. Check whether FortiManager is part of a high availability (HA) cluster.
  D. Determine whether the VDOMs of the same FortiGate will be assigned to different ADOMs.
  D. Determine whether the VDOMs of the same FortiGate will be assigned to different ADOMs.

• Question 18:

  Refer to the exhibit.

  

  According to the error message, why is FortiManager failing to add the FortiAnalyzer device?

  A. The administrator must use the correct user name and password of the FortiAnalyzer device.
  B. The administrator must turn off the Use Legacy Device login and add the FortiAnalyzer device to the same network as FortiManager.
  C. The administrator must select the FortiManager administrative access checkbox on the FortiAnalyzer management interface.
  D. The administrator must use the Add Model Device section and discover the FortiAnalyzer device.
  C. The administrator must select the FortiManager administrative access checkbox on the FortiAnalyzer management interface.

• Question 19:

  What will be the result of reverting to a previous revision version in the revision history?

  A. It win install configuration changes to managed device automatically.
  B. It will tag the device settings status as Auto-Update.
  C. It will modify the device-level database.
  D. It will generate a new version ID and remove all other revision history versions.
  C. It will modify the device-level database.

• Question 20:

  Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

  A. When changes to the device-level database are made on FortiManager
  B. When FortiManager is auto-updated with configuration changes made directly on a managed device
  C. When a configuration revision is reverted to a previous revision in the revision history
  D. When FortiManager installs device-level changes on a managed device
  B. When FortiManager is auto-updated with configuration changes made directly on a managed device
  D. When FortiManager installs device-level changes on a managed device