Question 1

Refer to the exhibit which shows the Download Import Report.

Why is FortiManager failing to import firewall policy ID 1?

Options :

A :

Policy ID 1 is configured from the interface any to port6. FortiManager rejects the request to import this policy because the any interface does not exist on FortiManager

B :

Policy ID 1 for this managed FortiGate already exists on FortiManager in the policy package named Remote-FortlGate.

C :

Policy ID 1 has an address object that already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.

D : Policy ID 1 does not have the ADOM Interface mapping configured on FortiManager.

Answer: C

Question 2

Which API method is used to create objects or overwrite existing ones?

Options :

A : Set

B : Add

C : Exec

D : Update

Answer: A

Question 3

An administrator created a new ADOM named Training for FortiGate devices only, and added the root FortiGate device of a Security Fabric group to the Training ADOM. Given the administrator's actions, which statement correctly describes the expected result for the downstream devices in the Security Fabric?

Options :

A : The downstream devices show as unauthorized in the Training ADOM

B : The downstream devices are automatically authorized.

C : The downstream devices will appear in the root ADOM.

D : The downstream devices must be added using the Add Device wizard.

Answer: A

Question 4

Exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

Options :

A : An administrator can also lock the Local-FortiGate_root policy package.

B : FortiManager is in workflow mode.

C : The FortiManager ADOM is locked by the administrator.

D : The FortiManager ADOM workspace mode is set to Normal

Answer: A,D

Question 5

Refer to the exhibit.

How will FortiManager try to get updates tor antivirus and IPS?

Options :

A : From the list of configured override servers or public FDN servers

B : From the configured override server IP address 10.0.1.50 only

C : From the default server fds1.fortinet.com

D : From public FDNI server IP address with the fourth highest octet only

Answer: B

Higher Test Marks with Free Online FCP_FMG_AD-7.4 Exam Practice

Buying Options: