السؤال #1

You want to let multiple administrators work in the same ADOM without creating configuration conflicts.What is the best and the most effective solution to apply?

A. Configure RADIUS authentication to assign ADOM roles to each user

B. Enable workflow mode, which is the only way to prevent concurrent configuration conflicts

C. Assign administrators with JSON API access to the FortiManager

D. Activate workspace mode in the ADOM settings

عرض الإجابة

اجابة صحيحة: D

السؤال #2

Refer to the exhibit.An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.After the installation operation is performed, which IP/netmask will be installed on Remote-Firewall [VDOM1] for the LAN firewall address object?

A. 21

B. 172

C. 172

D. 10

عرض الإجابة

اجابة صحيحة: A

السؤال #3

What is the purpose of ADOM revisions?

A. To save the current state of the whole ADOM

B. To save the current state of all policy packages and objects for an ADOM

C. To revert individual policy packages and device-level settings for a managed FortiGate

D. To save the FortiManager configuration in the System Checkpoints

عرض الإجابة

اجابة صحيحة: B

السؤال #4

An administrator enabled workspace mode and now wants to delete an address object that is currently referenced in a firewall policy.Which two results can the administrator expect? (Choose two.)

A. FortiManager will temporarily change the status of the referenced firewall policy to disabled

B. FortiManager will disable the status of the address object until the changes are installed

C. FortiManager will not allow the administrator to delete a referenced address object until they lock the ADOM

D. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

عرض الإجابة

اجابة صحيحة: CD

السؤال #5

Refer to the exhibits.An administrator needed to recover all the configurations related to the user, Support. The configurations were saved in configuration revision ID 9.The administrator reverted the configuration using the Configuration Revision History window and received the CLI output shown in the exhibit.What can you conclude from the CLI output?

A. The administrator set the flag to 0 to prevent configuration overrides

B. The administrator reinstalled the policy package

C. The administrator needs to retrieve the device to correctly detect the FortiGate firmware version

D. The administrator installed only the device-level configuration

عرض الإجابة

اجابة صحيحة: C

السؤال #6

You want to let multiple administrators work in the same ADOM without creating configuration conflicts.What is the best and the most effective solution to apply?

A. Configure RADIUS authentication to assign ADOM roles to each user

B. Enable workflow mode, which is the only way to prevent concurrent configuration conflicts

C. Assign administrators with JSON API access to the FortiManager

D. Activate workspace mode in the ADOM settings

عرض الإجابة

اجابة صحيحة: D

السؤال #7

Refer to the exhibit.If the monitored interface for the primary FortiManager device fails, what must you do to maintain high availability (HA)?

A. The FortiManager HA failover is transparent to administrators and does not require any additional action

B. Manually promote one of the working secondary devices to the primary role: and reboot the original primary device to remove the peer IP address of the failed device

C. Reconfigure the primary device to remove the peer IP address of the failed device from its configuration

D. Check the integrity database of the primary device to force a secondary device to become the new primary with all active interfaces

عرض الإجابة

اجابة صحيحة: A

السؤال #8

Refer to the exhibits.Which IP/netmask will be present in the LAN firewall address object on the Remote-Firewall?

A. 72

B. 92

C. 0

D. 72

عرض الإجابة

اجابة صحيحة: C

السؤال #9

An administrator wants to configure and manage multiple objects in the FortiManager database and give access to other users who work in the same database.To stay in control of the changes made to firewall policies by other team members, the administrator needs a setup where all modifications go through a central check before they can be installed.How can the administrator create this setup?

A. Enable the prompt asking the administrator to accept firewall policies changes before saving

B. Enable the workspace (for all ADOMs) to control all changes made by any administrator

C. Enable device lock and the advanced mode feature in the ADOM

D. Enable workflow mode and the ADOM lock feature

عرض الإجابة

اجابة صحيحة: D

السؤال #10

Refer to the exhibits.An administrator needed to recover all the configurations related to the user, Support. The configurations were saved in configuration revision ID 9.The administrator reverted the configuration using the Configuration Revision History window and received the CLI output shown in the exhibit.What can you conclude from the CLI output?

A. The administrator set the flag to 0 to prevent configuration overrides

B. The administrator reinstalled the policy package

C. The administrator needs to retrieve the device to correctly detect the FortiGate firmware version

D. The administrator installed only the device-level configuration

عرض الإجابة

اجابة صحيحة: C

السؤال #11

Refer to the exhibits.An administrator added BR1-FGT-1 to FortiManager and started importing the policy package. During the process, they saw that they need to choose values from FortiGate or FortiManager.Which conclusion is most clearly supported by the exhibits?

A. BR1-FGT-1 does not support the SSL/SSH profile with HTTPS on port 443

B. The administrator must match the FortiOS firmware version with the FortiManager ADOM firmware version to resolve the conflict status

C. The default Firewall Profile-Protocol-Options object is the only profile that does not significantly affect any configuration changes on either FortiManager or FortiGate

D. FortiManager has a different FortiGuard database compared to FortiGate BR1-FGT-1 for the QUIC protocol

عرض الإجابة

اجابة صحيحة: C

السؤال #12

Refer to the exhibit.An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.After the installation operation is performed, which IP/netmask is shown on FortiManager for this firewall address object for devices without a Per-Device Mapping set?

A. FortiManager generates an error for each FortiGate without a per-device mapping defined for that object

B. 192

C. 192

D. FortiManager replaces the address object to none

عرض الإجابة

اجابة صحيحة: B

السؤال #13

Which is recommended when you are managing a high volume of logs in your network?

A. Store logs on FortiManager and use FortiView

B. Add and manage FortiAnalyzer from FortiManager

C. Enable advanced ADOM mode on FortiManager

D. Forward logs from FortiAnalyzer to FortiManager daily

عرض الإجابة

اجابة صحيحة: B

السؤال #14

An administrator wants to configure and manage multiple objects in the FortiManager database and give access to other users who work in the same database.To stay in control of the changes made to firewall policies by other team members, the administrator needs a setup where all modifications go through a central check before they can be installed.How can the administrator create this setup?

A. Enable the prompt asking the administrator to accept firewall policies changes before saving

B. Enable the workspace (for all ADOMs) to control all changes made by any administrator

C. Enable device lock and the advanced mode feature in the ADOM

D. Enable workflow mode and the ADOM lock feature

عرض الإجابة

اجابة صحيحة: D

السؤال #15

Refer to the exhibits.An administrator needed to recover all the configurations related to the user, Support. The configurations were saved in configuration revision ID 9.The administrator reverted the configuration using the Configuration Revision History window and received the CLI output shown in the exhibit.What can you conclude from the CLI output?

A. The administrator set the flag to 0 to prevent configuration overrides

B. The administrator reinstalled the policy package

C. The administrator needs to retrieve the device to correctly detect the FortiGate firmware version

D. The administrator installed only the device-level configuration

عرض الإجابة

اجابة صحيحة: C

السؤال #16

While attempting to push a NetFlow configuration script through the FortiManager policy package: an administrator encounters an error stating that an object is unrecognized in line 4.What must the administrator do to successfully apply the NetFlow configuration script and avoid the object unrecognized error?

A. Make sure the user running the script has full access to the VDOM—AGEUSR

B. Run the script on the device database

C. Use metadata variables if they use VDOMs in the script

D. Create a normalized interface on the policy layer before running the script

عرض الإجابة

اجابة صحيحة: C

السؤال #17

Which is recommended when you are managing a high volume of logs in your network?

A. dd and manage FortiAnalyzer from FortiManager

B. orward logs from FortiAnalyzer to FortiManager daily

C. tore logs on FortiManager and use FortiView

D. nable advanced ADOM mode on FortiManager

عرض الإجابة

اجابة صحيحة: A

السؤال #18

Refer to the exhibit.Which two statements about the output are true? (Choose two.)

A. The latest revision history for the managed FortiGate does not match the device-level database

B. Configuration changes have been installed on FortiGate, which means the FortiGate configuration has been changed

C. Configuration changes directly made on FortiGate have been automatically updated to the device-level database

D. The latest revision history for the managed FortiGate does match the FortiGate running configuration

عرض الإجابة

اجابة صحيحة: AD

السؤال #19

Refer to the exhibit.Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

A. An administrator can also lock the Local-FortiGate_root policy package

B. FortiManager is in workflow mode

C. The FortiManager ADOM is locked by the administrator

D. The FortiManager ADOM workspace mode is set to Normal

عرض الإجابة

اجابة صحيحة: AD

السؤال #20

An administrator wants to configure and manage multiple objects in the FortiManager database and give access to other users who work in the same database.To stay in control of the changes made to firewall policies by other team members, the administrator needs a setup where all modifications go through a central check before they can be installed.How can the administrator create this setup?

A. Enable the prompt asking the administrator to accept firewall policies changes before saving

B. Enable the workspace (for all ADOMs) to control all changes made by any administrator

C. Enable device lock and the advanced mode feature in the ADOM

D. Enable workflow mode and the ADOM lock feature

عرض الإجابة

اجابة صحيحة: D

السؤال #21

Which two items does an FGFM keepalive message include? (Choose two.)

A. FortiGate IPS version

B. FortiGate license information

C. FortiGate configuration checksum

D. FortiGate uptime

عرض الإجابة

اجابة صحيحة: CD

السؤال #22

You want to let multiple administrators work in the same ADOM without creating configuration conflicts.What is the best and the most effective solution to apply?

A. Configure RADIUS authentication to assign ADOM roles to each user

B. Enable workflow mode, which is the only way to prevent concurrent configuration conflicts

C. Assign administrators with JSON API access to the FortiManager

D. Activate workspace mode in the ADOM settings

عرض الإجابة

اجابة صحيحة: D

السؤال #23

What is the purpose of ADOM revisions?

A. o revert individual policy packages and device-level settings for a managed FortiGate

B. o save the current state of the whole ADOM

C. o save the current state of all policy packages and objects for an ADOM

D. o save the FortiManager configuration in the System Checkpoints

عرض الإجابة

اجابة صحيحة: C

السؤال #24

Refer to the exhibit.Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

A. An administrator can also lock the Local-FortiGate_root policy package

B. FortiManager is in workflow mode

C. The FortiManager ADOM is locked by the administrator

D. The FortiManager ADOM workspace mode is set to Normal

عرض الإجابة

اجابة صحيحة: AD

السؤال #25

Refer to the exhibit.Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

A. An administrator can also lock the Local-FortiGate_root policy package

B. FortiManager is in workflow mode

C. The FortiManager ADOM is locked by the administrator

D. The FortiManager ADOM workspace mode is set to Normal

عرض الإجابة

اجابة صحيحة: AD

السؤال #26

Refer to the exhibit.An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.After the installation operation is performed, which IP/netmask will be installed on Remote-Firewall [VDOM1] for the LAN firewall address object?

A. 21

B. 172

C. 172

D. 10

عرض الإجابة

اجابة صحيحة: A

السؤال #27

Refer to the exhibit.An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.After the installation operation is performed, which IP/netmask is shown on FortiManager for this firewall address object for devices without a Per-Device Mapping set?

A. FortiManager generates an error for each FortiGate without a per-device mapping defined for that object

B. 192

C. 192

D. FortiManager replaces the address object to none

عرض الإجابة

اجابة صحيحة: B

السؤال #28

Refer to the exhibit.If the monitored interface for the primary FortiManager device fails, what must you do to maintain high availability (HA)?

A. The FortiManager HA failover is transparent to administrators and does not require any additional action

B. Manually promote one of the working secondary devices to the primary role: and reboot the original primary device to remove the peer IP address of the failed device

C. Reconfigure the primary device to remove the peer IP address of the failed device from its configuration

D. Check the integrity database of the primary device to force a secondary device to become the new primary with all active interfaces

عرض الإجابة

اجابة صحيحة: A

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان