Free FCP_FMG_AD-7.4 Sample Questions — FCP - FortiManager 7.4 Administrator

An administrator has assigned a global policy package to a new ADOM called ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

• A. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package
• B. When a new policy package is created, the administrator must assign the global policy package from the global ADOM
• C. When a new policy package is created, the administrator must import the global policy package to ADOM1
• D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package

An administrator created a new ADOM named Training for FortiGate devices only, and added the root FortiGate device of a Security Fabric group to the Training ADOM. Given the administrator's actions, which statement correctly describes the expected result for the downstream devices in the Security Fabric?

• A. The downstream devices show as unauthorized in the Training ADOM
• B. The downstream devices are automatically authorized
• C. The downstream devices will appear in the root ADOM
• D. The downstream devices must be added using the Add Device wizard

Which statement about the policy lock feature on FortiManager is true?

• A. Policy locking is available in workspace normal mode
• B. Locking a policy takes precedence over a locked ADOM
• C. When a policy is locked, the ADOM that contains it is also locked
• D. Administrators in the approval group can work concurrently on a locked policy

What must you consider before deciding to use FortiManager to manage a FortiAnalyzer device?

• A. Confirm that FortiManager has enough storage capacity for the expected logs
• B. Ensure that FortiAnalyzer features are installed in advance
• C. Check whether FortiManager is part of a high availability (HA) cluster
• D. Determine whether the VDOMs of the same FortiGate will be assigned to different ADOMs

When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

• A. FortiManager will not push the CLI commands as part of the installation that will cause the tunnel to go down
• B. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down
• C. FortiManager will revert and install a previous configuration revision on the managed FortiGate
• D. FortiGate will reject the CLI commands that will cause the tunnel to go down

What will be the result of reverting to a previous revision version in the revision history?

• A. It will install configuration changes to managed device automatically
• B. It will tag the device settings status as Auto-Update
• C. It will modify the device-level database
• D. It will generate a new version ID and remove all other revision history versions

An administrator enabled workspace mode and now wants to delete an address object that is currently referenced in a firewall policy. Which two results can the administrator expect? (Choose two.)

• A. FortiManager will temporarily change the status of the referenced firewall policy to disabled
• B. FortiManager will disable the status of the address object until the changes are installed
• C. FortiManager will not allow the administrator to delete a referenced address object until they lock the ADOM
• D. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy

An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?

• A. It allows administrative access to FortiManager
• B. It allows FortiManager to respond to requests for FortiGuard services from FortiGate devices
• C. It allows third-party applications to gain read/write access to FortiManager
• D. It allows FortiManager to determine the connection status of managed devices

What is a characteristic of the FortiManager high availability (HA) feature?

• A. When a secondary unit is removed, FortiManager updates the managed devices using TCP port 5199
• B. The primary unit synchronizes all configuration revision with the secondary units
• C. All secondary units must be in the same network as the primary unit
• D. Each cluster member must be upgraded manually, starting with the primary unit

Which two items are included in the FortiManager backup? (Choose two.)

• A. All devices
• B. Firmware images
• C. FortiGuard database
• D. Flash configuration