⚡ FortiManager 7.6 | Exam Prep (Pregunta 11 a pregunta 20)

Refer to the following configuration. config system global set workspace-mode normal end What are two results from the configuration shown in the exhibit? Choose two answers. The same administrator can lock more than one ADOM at the same time. Multiple administrators can lock and work on separate ADOMs at the same time. All changes must be approved before they can be installed on a device. Concurrent read-write access to an ADOM is disabled.

Which two conditions trigger FortiManager to create a new revision history? (Choose two.). When FortiManager installs device-level changes on a managed device. When changes to the device-level database are made on FortiManager. When FortiManager is auto-updated with configuration changes made directly on a managed device. When a provisioning template is assigned to a managed device on the device-level database.

Refer to the exhibit. Which two statements about the configuration shown in the exhibit are true? Choose two answers. An administrator can lock the Local-FortiGate_root policy package. The administrator created a snapshot of the Remote-FortiGate policy package. The FortiManager ADOM workspace mode is set to normal. The FortiManager is in workflow mode.

Refer to the exhibit. Which two results occur if you run the script using the Device Database option? (Choose two.). The device Config Status is tagged as Modified. The script history shows the successful installation of the script on the remote FortiGate. The successful execution of a script on the Device Database creates a new revision history. The administrator must install these changes on a managed device using the Install Wizard.

Which FortiGate configuration settings is part of an ADOM-level database on FortiManager?. NSX-T service template. Security template. Routing. SNMP.

Refer to the exhibits. An administrator runs the reload failure command diagnose test deploymanager reloadconf 262 on FortiManager. The administrator must use the FortiGate name instead of the ID number. The administrator just recently added FortiGate HQ-NGFW as a model device. FortiManager requires the FortiGate serial number instead of the ID number. FortiManager does not support FortiOS version 7.0.

Refer to the exhibit. If the monitored interface for the primary FortiManager device fails, what must you do to maintain high availability (HA)?. The FortiManager HA failover is transparent to administrators and does not require any additional action. Manually promote one of the working secondary devices to the primary role: and reboot the original primary device to remove the peer IP address of the failed device. Reconfigure the primary device to remove the peer IP address of the failed device from its configuration. Check the integrity database of the primary device to force a secondary device to become the new primary with all active interfaces.

Refer to the exhibits. Which IP/netmask will be present in the LAN firewall address object on the Remote-Firewall?. 172.16.0.0/255.255.255.0. 10.0.0.0/255.255.255.0. 192.168.1.0/255.255.255.0. 172.16.10.0/255.255.255.0.

While attempting to push a NetFlow configuration script through the FortiManager policy package: an administrator encounters an error stating that an object is unrecognized in line 4. What must the administrator do to successfully apply the NetFlow configuration script and avoid the object unrecognized error?. Make sure the user running the script has full access to the VDOM—AGEUSR. Run the script on the device database. Use metadata variables if they use VDOMs in the script. Create a normalized interface on the policy layer before running the script.

The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error: config vpn ipsec phase2-interface [parameter(s) invalid. detail: object mismatch] What must the administrator do to resolve the script error and successfully apply the IPsec configuration?. Add the end command after finishing the IPsec phase 1-interface configuration block. Use IPsec templates to deploy provisioning templates. Add a second config vpn ipsec phase2-interface block without linking it to phase1. Run the script using the policy package or ADOM database method.