FCP_FMG_AD-7.6 試験問題を無料オンラインアクセス

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM.
How can the customer administrator edit the global header policy of the global policy package?

• A.The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.
• B.The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.
• C.The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.
• D.The customer administrator can edit the header policy by using workspace mode on the global ADOM.

An administrator has a FortiGate-HQ device with VDOMs-root, HR and Facilities, currently managed under the FortiManager ADOM-Site1. They try to move VDOM HR to the FortiManager ADOM-Site2, but it does not work.
Why is the administrator not able to move FortiGate-HQ VDOM HR to FortiManager ADOM-Site2?

• A.FortiManager must be in ADOM normal mode, which does not allow VDOMs to be managed separately.
• B.The administrator must have full access in the device layer of FortiGate-HQ VDOM-root before they can VDOMs to different ADOMs.
• C.The FortiGate-HQ must be managed under the FortiManager ADOM-root to allow moving its VDOMs to different ADOMs.
• D.The administrator must delete the FortiGate-HQ device from FortiManager and add it again using the Add Device wizard before moving the VDOM.

Refer to the exhibit.

FortiManager is operating behind a network address translation (NAT) device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings.
What is the expected result during discovery?

• A.FortiManager sets the 100.65.0.101 IP address on FortiGate.
• B.FortiManager sets the 100.65.0.120 IP address on FortiGate.
• C.FortiManager sets both the 100.65.0.120 IP address and 100.65.0.101 IP address on FortiGate.
• D.FortiManager sets both the 100.65.0.120 IP address and 10.0.13.120 IP address on FortiGate.

Refer to Exhibit:

An administrator admin used the Configuration Revision History window to revert the FortiGate device configuration to revision ID 6. After running the reinstall policy package, the administrator noticed problems with the firewall policy- they could not see the unset comment on policy ID 1.
Why did FortiManager not remove the comment from policy ID 1 when the administrator ran reinstall policy package?

• A.Because the administrator student must install the configuration changes to correctly see the expected results.
• B.Because every time the administrator uses the revert config file, they must use the Install Wizard instead of running the reinstall policy package.
• C.Because the administrator must import the firewall policies to update the firewall policy package.
• D.Because the administrator used the Revision Diff view, which shows what changed, not what will be installed.

Refer to the exhibit.

An administrator assigned a new policy package to FortiGate HQ-NGFW-1. In the installation preview, they noticed some settings they did not modify and are unsure about the changes.
Based on the exhibit, which two things will happen if they continue with the installation? (Choose two.)

• A.FortiGate HQ-NGFW-1 can use FortiManager firmware templates to upgrade firmware and ratings.
• B.FortiGate HQ-NGFW-1 will use the root_CA3 certificate in firewall address objects or policies.
• C.FortiManager will install the CA certificate named root_CA3 to authenticate FortiGate-to-FortiManager communication protocol (FGFM) tunnel connections with FortiGate HQ- NGFW-1.
• D.FortiGate HQ-NGFW-1 can contact the FortiManager acting as FortiGuard Distribution Server (FDS) to download FortiGuard updates.