FCP_FMG_AD-7.6 Practice Questions Preview

Question 1

Single choice

Company policy dictates that any time a change is made to a policy package on FortiManager an ADOM revision is created before the change installed, and that revision is held for a minimum of 90 days.

Over the past three months, each installed change has resulted in several unused policies and duplicate objects.

The FortiManager administrator plans to upgrade the FortiGate devices and then upgrade the FortiManager ADOM from version 7.4 to 7.6.

Which action can the administrator take to avoid slow ADOM upgrades?

A
Check and repair the global configuration database before upgrading.
B
Export firewall policies to Excel, delete them on the ADOM. then reimport them after upgradingthe ADOM.
C
Find unused firmware templates, then delete them before upgrading.
D
Limit ADOM revisions before upgrading.

Question 2

Single choice

Which action creates a new ADOM revision automatically?

A
Viewing the policy package
B
Installing a policy package
C
Locking an ADOM
D
Running a script on the remote device

Question 3

Single choice

What is the purpose of ADOM revisions?

A
ADOM revisions find unused, duplicate, and unnecessary firewall policies and objects.
B
ADOM revisions show specific changes in a policy package when it is installed.
C
ADOM revisions compare previous snapshots of the Policy Package and ADOM-level objects with the device-level database.
D
ADOM revisions save the current state of all policy packages and objects for an ADOM.

Question 4

Single choice

Refer to the exhibit.

What percent of the available RAM is being used by the process in charge of downloading the web and email filter databases from the public FortiGuard servers?

A
2.9
B
3.1
C
1.5
D
4.1

Question 5

Multiple choice

Which two statements about scheduled backups on FortiManager are true? (Choose two.)

A
They back up all devices and the FortiGuard database.
B
They can be configured using the CLI and the GUI.
C
They put FortiManager in offline mode.
D
They support FTP, SCP, and SFTP.

Question 6

Single choice

Refer to the exhibit.

Start to import config from device(Remote-FortiGate) vdom(root) to adom(root), package(Remote-
FortiGate_root)

"firewall address", SKIPPED, "(name=all, oid=2309, DUPLICATE)"

"firewall address", FAIL, "(name=REMOTE_SUBNET, oid=2311, reason=interface((firewall
address:REMOTE_SUBNET) any<-port6) binding
fail)"

"firewall policy", FAIL, "(name=1, oid=3070, reason=interface(interface binding contradiction. detail:
(firewall address:REMOTE_SUBNET) any<-port6) binding fail)"

What can you conclude from the downloaded import report?

A
FortiManager does not support per-device mapping for firewall addresses.
B
The administrator will see a new policy package named Remote-FortiGate_root in the FortiManager ADOM database.
C
FortiManager will change the configuration of REMOTE_SUBNET to match the interface mapping coming in from Remote-FortiGate.
D
As a result of this policy import process, FortiManager will create a new firewall address called REMOTE_SUBNET in the ADOM database.

Question 7

Multiple choice

Refer to the exhibit.

If both FortiManager and FortiGate are behind NAT devices, what are the two expected results? (Choose two.)

A
FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
B
FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.
C
If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
D
During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

Question 8

Multiple choice

Which two statements about the integrity of databases on FortiManager are correct? (Choose two.)

A
The diagnose dvm check-integrity command attempts to fix a corrupted file system.
B
Scheduled backups run database integrity commands automatically.
C
Not following the correct upgrade path may cause inconsistencies in the databases.
D
You should fix all database integrity issues before performing a backup.
E
The diagnose cdb check adom-integrity command can correct issues related to looked devices.

Question 9

Single choice

Refer to the exhibit.

According to the error message, why is FortiManager failing to add the FortiAnalyzer device?

A
The administrator must use the correct user name and password of the FortiAnalyzer device.
B
The administrator must turn off the Use Legacy Device login and add the FortiAnalyzer device to the same network as FortiManager.
C
The administrator must select the FortiManager administrative access checkbox on the FortiAnalyzer management interface.
D
The administrator must use the Add Model Device section and discover the FortiAnalyzer device.

Question 10

Single choice

An administrator assigns a global policy package to a local ADOM.

What is required before local policies can reference global policies?

A
Enable workflow mode
B
Enable policy inheritance
C
Import the global policy
D
Install the global policy package

Question 11

Single choice

Which FortiManager mode prevents simultaneous edits by multiple administrators in the same ADOM?

A
Workspace mode
B
Backup ADOM mode
C
Workflow mode
D
Normal ADOM mode

Question 12

Single choice

Refer to the exhibit.

Given the import report shown in the exhibit, how did FortiManager handle the service category namedGeneral?

A
FortiManager ignored the firewall service category General but created a new service category in its database.
B
FortiManager ignored the firewall service category General and deleted the duplicate value in its database.
C
FortiManager ignored the firewall service category General and did not update its database with the value.
D
FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.

Question 13

Single choice

An administrator has enabled Service Access on FortiManager.

What is the purpose of Service Access on the FortiManager interface?

A
It allows administrative access to FortiManager.
B
It allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.
C
It allows third-party applications to gain read/write access to FortiManager.
D
It allows FortiManager to determine the connection status of managed devices.

Question 14

Single choice

What is the purpose of normalized interfaces in FortiManager?

A
To simplify firmware upgrades
B
To standardize interface names across devices
C
To increase policy installation speed
D
To replace per-device mapping

Question 15

Single choice

You are moving managed FortiGate devices from one ADOM to a new ADOM.

Which statement correctly describes the expected result?

A
The shared device settings will be installed automatically.
B
The shared policy package will not be moved to the new ADOM automatically.
C
The shared policy package will not be moved to the new ADOM.
D
Policy packages will be imported into the new ADOM automatically.

Question 16

Single choice

An administrator must create a policy and install it on a FortiGate device within an ADOM in backup mode.

How can the administrator perform this task?

A
Use the Install Wizard located on the device manager.
B
Enable workflow mode to allow policy creation and approval.
C
Make sure the ADOM and FortiGate firmware versions match and use the ADOM policy package.
D
Use a FortiManager script to apply the configuration changes.

Question 17

Single choice

You want to let multiple administrators work in the same ADOM without creating configuration conflicts.

What is the best and the most effective solution to apply?

A
Configure RADIUS authentication to assign ADOM roles to each user.
B
Enable workflow mode, which is the only way to prevent concurrent configuration conflicts.
C
Assign administrators with JSON API access to the FortiManager.
D
Activate workspace mode in the ADOM settings.