السؤال #1

If one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?

A. The FortiManager high availability HA state transition is transparent to administrators and does not require any reconfiguration

B. Run a sanity check on the failed device to make sure HA heartbeat packets are using TCP port 5199

C. Manually promote one of the working secondary devices to the primary role

D. Remove the peer IP of the failed device on the primary device

عرض الإجابة

اجابة صحيحة: D

السؤال #2

An administrator has assigned a global policy package to a new ADOM named ADOM1.What will happen if the administrator tries to create a new policy package in ADOM1?

A. The administrator will be able to select the option to assign the global policy package to the new policy package

B. FortiManager will automatically assign the global policy package to the new policy package

C. FortiManager will automatically install policies on the policy package in ADOM1

D. The administrator will have to assign the global policy package from the global ADOM

عرض الإجابة

اجابة صحيحة: D

السؤال #3

Refer to the exhibit.Which two statements about the output are true? (Choose two.)

A. The latest revision history for the managed FortiGate does not match the device-level database

B. Configuration changes have been installed on FortiGate, which means the FortiGate configuration has been changed

C. Configuration changes directly made on FortiGate have been automatically updated to the device-level database

D. The latest revision history for the managed FortiGate does match the FortiGate running configuration

عرض الإجابة

اجابة صحيحة: AD

السؤال #4

Refer to the exhibit.An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.After the installation operation is performed, which IP/netmask will be installed on Remote-Firewall [VDOM1] for the LAN firewall address object?

A. 21

B. 172

C. 172

D. 10

عرض الإجابة

اجابة صحيحة: A

السؤال #5

Which FortiGate configuration settings is part of an ADOM-level database on FortiManager?

A. ecurity template

B. outing

C. SX-T service template

D. NMP

عرض الإجابة

اجابة صحيحة: A

السؤال #6

Refer to the exhibit.An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.After the installation operation is performed, which IP/netmask will be installed on Local-FortiGate for theLOCAL_SUBNETfirewall address object?

A. t will create two firewall address objects on Local-FortiGate with 192

B. 0

C. ocal-FortiGate automatically chooses an IP/netmask based on its network interface settings

D. 92

عرض الإجابة

اجابة صحيحة: D

السؤال #7

Refer to the exhibit.An administrator would like to create three ADOMs on FortiManager with different access levels based on departments.What two conclusions can you draw from the design shown in the exhibit? (Choose two.)

A. The FortiManager administrator must set the ADOM device mode to Advanced

B. Policies and objects databases can be shared between the Financial and HR ADOMs

C. An administrator with the super user profile can access all the VDOMs

D. The administrator must configure FortiManager in workspace normal mode

عرض الإجابة

اجابة صحيحة: AC

السؤال #8

What is the purpose of ADOM revisions?

A. To save the current state of the whole ADOM

B. To save the current state of all policy packages and objects for an ADOM

C. To revert individual policy packages and device-level settings for a managed FortiGate

D. To save the FortiManager configuration in the System Checkpoints

عرض الإجابة

اجابة صحيحة: B

السؤال #9

What are two outcomes of ADOM revisions? Choose two answers.

A. ADOM revisions can save the current state of the entire ADOM

B. ADOM revisions do not increase the size of configuration backups

C. ADOM revisions can save the current state of all policy packages and objects for an ADOM

D. ADOM revisions appear in the Install Policy and Package Settings section of the install wizard

عرض الإجابة

اجابة صحيحة: AC

السؤال #10

Refer to the exhibit.An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.After the installation operation is performed, which IP/netmask is shown on FortiManager for this firewall address object for devices without a Per-Device Mapping set?

A. FortiManager generates an error for each FortiGate without a per-device mapping defined for that object

B. 192

C. 192

D. FortiManager replaces the address object to none

عرض الإجابة

اجابة صحيحة: B

السؤال #11

Refer to the exhibit.Which two statements about the output are true? (Choose two.)

A. The latest revision history for the managed FortiGate does not match the device-level database

B. Configuration changes have been installed on FortiGate, which means the FortiGate configuration has been changed

C. Configuration changes directly made on FortiGate have been automatically updated to the device-level database

D. The latest revision history for the managed FortiGate does match the FortiGate running configuration

عرض الإجابة

اجابة صحيحة: AD

السؤال #12

What is the purpose of ADOM revisions?

A. To save the current state of the whole ADOM

B. To save the current state of all policy packages and objects for an ADOM

C. To revert individual policy packages and device-level settings for a managed FortiGate

D. To save the FortiManager configuration in the System Checkpoints

عرض الإجابة

اجابة صحيحة: B

السؤال #13

An administrator wants to configure and manage multiple objects in the FortiManager database and give access to other users who work in the same database.To stay in control of the changes made to firewall policies by other team members, the administrator needs a setup where all modifications go through a central check before they can be installed.How can the administrator create this setup?

A. Enable the prompt asking the administrator to accept firewall policies changes before saving

B. Enable the workspace (for all ADOMs) to control all changes made by any administrator

C. Enable device lock and the advanced mode feature in the ADOM

D. Enable workflow mode and the ADOM lock feature

عرض الإجابة

اجابة صحيحة: D

السؤال #14

Refer to the exhibit.Which two statements about the output are true? (Choose two.)

A. The latest revision history for the managed FortiGate does not match the device-level database

B. Configuration changes have been installed on FortiGate, which means the FortiGate configuration has been changed

C. Configuration changes directly made on FortiGate have been automatically updated to the device-level database

D. The latest revision history for the managed FortiGate does match the FortiGate running configuration

عرض الإجابة

اجابة صحيحة: AD

السؤال #15

Refer to the exhibit.Given the configuration shown in the exhibit, what are two results from this configuration? (Choose two.)

A. You can validate administrator login attempts through external servers

B. The same administrator can lock more than one ADOM at the same time

C. Two or more administrators can make configuration changes at the same time, in the same ADOM

D. Concurrent read-write access to an ADOM is disabled

عرض الإجابة

اجابة صحيحة: CD

السؤال #16

What is the purpose of ADOM revisions?

A. To save the current state of the whole ADOM

B. To save the current state of all policy packages and objects for an ADOM

C. To revert individual policy packages and device-level settings for a managed FortiGate

D. To save the FortiManager configuration in the System Checkpoints

عرض الإجابة

اجابة صحيحة: B

السؤال #17

Refer to the exhibit.Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

A. An administrator can also lock the Local-FortiGate_root policy package

B. FortiManager is in workflow mode

C. The FortiManager ADOM is locked by the administrator

D. The FortiManager ADOM workspace mode is set to Normal

عرض الإجابة

اجابة صحيحة: AD

السؤال #18

Refer to the exhibit.Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

A. An administrator can also lock the Local-FortiGate_root policy package

B. FortiManager is in workflow mode

C. The FortiManager ADOM is locked by the administrator

D. The FortiManager ADOM workspace mode is set to Normal

عرض الإجابة

اجابة صحيحة: AD

السؤال #19

After correcting a policy package configuration issue, you want to prevent administrators from repeating the mistake that caused the issue.Which FortiManager approach best meets this need?

A. onfigure an TCL script to run locally on FortiManager for each FortiGate

B. nable a workflow requiring approval before installing policy packages on any FortiGate

C. estrict administrators with an administration profile from viewing the revision history to limit who can make changes

D. nable the change note to require administrators to add a note whenever they change object configurations

عرض الإجابة

اجابة صحيحة: B

السؤال #20

An administrator receives the import report after importing policies into the policy package layer.Based on the import report, how did FortiManager handle the profile-protocol-options object named default?

A. ortiManager created a new service category in its database

B. ortiManager did not update its database with the value

C. ortiManager updated the duplicate value in the FortiGate database

D. ortiManager deleted the duplicate value from its database

عرض الإجابة

اجابة صحيحة: B

السؤال #21

An administrator enabled workspace mode and now wants to delete an address object that is currently referenced in a firewall policy.Which two results can the administrator expect? (Choose two.)

A. FortiManager will temporarily change the status of the referenced firewall policy to disabled

B. FortiManager will disable the status of the address object until the changes are installed

C. FortiManager will not allow the administrator to delete a referenced address object until they lock the ADOM

D. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

عرض الإجابة

اجابة صحيحة: CD

السؤال #22

An administrator enabled workspace mode and now wants to delete an address object that is currently referenced in a firewall policy.Which two results can the administrator expect? (Choose two.)

A. FortiManager will temporarily change the status of the referenced firewall policy to disabled

B. FortiManager will disable the status of the address object until the changes are installed

C. FortiManager will not allow the administrator to delete a referenced address object until they lock the ADOM

D. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

عرض الإجابة

اجابة صحيحة: CD

السؤال #23

Refer to the exhibit.An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.After the installation operation is performed, which IP/netmask will be installed on Remote-Firewall [VDOM1] for the LAN firewall address object?

A. 21

B. 172

C. 172

D. 10

عرض الإجابة

اجابة صحيحة: A

السؤال #24

An administrator enabled workspace mode and now wants to delete an address object that is currently referenced in a firewall policy.Which two results can the administrator expect? (Choose two.)

A. FortiManager will temporarily change the status of the referenced firewall policy to disabled

B. FortiManager will disable the status of the address object until the changes are installed

C. FortiManager will not allow the administrator to delete a referenced address object until they lock the ADOM

D. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

عرض الإجابة

اجابة صحيحة: CD

السؤال #25

When using the FortiManager JSON API, what is the purpose of the session ID received after successful authentication?

A. t is used to identify the FortiManager metadata on the client

B. t includes a hash to check the integrity of the JSON response sent by FortiManager

C. t contains information about the HTTP request method used

D. t serves as an authentication token for subsequent API requests

عرض الإجابة

اجابة صحيحة: D

السؤال #26

Refer to the exhibit.An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.After the installation operation is performed, which IP/netmask is shown on FortiManager for this firewall address object for devices without a Per-Device Mapping set?

A. FortiManager generates an error for each FortiGate without a per-device mapping defined for that object

B. 192

C. 192

D. FortiManager replaces the address object to none

عرض الإجابة

اجابة صحيحة: B

السؤال #27

Refer to the exhibits.An administrator runs the reload failure command diagnose test deploymanager reloadconf 262 on FortiManager.Why does the administrator receive an error message?

A. ortiManager requires the FortiGate serial number instead of the ID number

B. he administrator must use the FortiGate name instead of the ID number

C. he administrator just recently added FortiGate HQ-NGFW as a model device

D. ortiManager does not support FortiOS version 7

عرض الإجابة

اجابة صحيحة: C

السؤال #28

Refer to the exhibit.Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

A. An administrator can also lock the Local-FortiGate_root policy package

B. FortiManager is in workflow mode

C. The FortiManager ADOM is locked by the administrator

D. The FortiManager ADOM workspace mode is set to Normal

عرض الإجابة

اجابة صحيحة: AD

السؤال #29

Refer to the exhibit.If the monitored interface for the primary FortiManager device fails, what must you do to maintain high availability (HA)?

A. The FortiManager HA failover is transparent to administrators and does not require any additional action

B. Manually promote one of the working secondary devices to the primary role: and reboot the original primary device to remove the peer IP address of the failed device

C. Reconfigure the primary device to remove the peer IP address of the failed device from its configuration

D. Check the integrity database of the primary device to force a secondary device to become the new primary with all active interfaces

عرض الإجابة

اجابة صحيحة: A

السؤال #30

An administrator has assigned a global policy package to a new ADOM named ADOM1.What will happen if the administrator tries to create a new policy package in ADOM1?

A. The administrator will be able to select the option to assign the global policy package to the new policy package

B. FortiManager will automatically assign the global policy package to the new policy package

C. FortiManager will automatically install policies on the policy package in ADOM1

D. The administrator will have to assign the global policy package from the global ADOM

عرض الإجابة

اجابة صحيحة: A

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان