⚡ FortiManager 7.6 | Exam Prep (Pregunta 21 a pregunta 30)

A FortiManager administrator opens the revision history and choose to revert to a previous version. What will this action do to the current device configuration?. It will trigger an unknown device-level database status, and the administrator will have to import a policy package to sync. It will trigger a conflict status if it is using any provisioning template, and the administrator will have to install changes. It will revert both configurations: device-level database and policy layer database. It will modify the device-level database.

An administrator notices that CLI scripts are failing on some FortiGate devices because they use different FortiOS versions. Which two actions should the administrator take to fix the failing CLI scripts? Choose two answers. Create separate ADOMs for each FortiOS version. Disable CLI scripts for devices using older firmware. Modify the CLI scripts to include conditional commands based on FortiOS version. Create version-specific CLI script groups and assign them to the appropriate devices.

An administrator receives the import report after importing policies into the policy package layer. Based on the import report, how did FortiManager handle the profile-protocol-options object named default?. FortiManager deleted the duplicate value from its database. FortiManager created a new service category in its database. FortiManager did not update its database with the value. FortiManager updated the duplicate value in the FortiGate database.

Push updates are failing on a FortiGate device located behind a network address translation (NAT) device? Which two settings should the administrator check to correct this problem? (Choose two.). Make sure the NAT device IP address and the correct ports are configured on FortiManager. Make sure FortiGuard updates and web service are enabled on the FortiGuard service interface. Make sure the virtual IP address and the correct ports are configured on the NAT device. Make sure the Bind to IP address option on the FortiGuard service interface is set to the virtual IP address from the NAT device.

An administrator must create a policy and install it on a FortiGate device within an ADOM in backup mode. How can the administrator perform this task?. Use the Install Wizard located on the device manager. Enable workflow mode to allow policy creation and approval. Make sure the ADOM and FortiGate firmware versions match and use the ADOM policy package. Use a FortiManager script to apply the configuration changes.

Refer to Exhibits: An administrator has observed the performance status outputs on an HA cluster for 55 seconds. Which FortiGate is the primary?. HQ-NGFW-2 with the parameter memory-failover-threshold setting. HQ-NGFW-2 with the parameter priority setting. HQ-NGFW-1 with the parameter memory-failover-flip-timeout setting. HQ-NGFW-1 with the parameter override setting.

Refer to the exhibits. An administrator added BR1-FGT-1 to FortiManager and started importing the policy package. During the process, they saw that they need to choose values from FortiGate or FortiManager. Which conclusion is most clearly supported by the exhibits?. BR1-FGT-1 does not support the SSL/SSH profile with HTTPS on port 443. The administrator must match the FortiOS firmware version with the FortiManager ADOM firmware version to resolve the conflict status. The default Firewall Profile-Protocol-Options object is the only profile that does not significantly affect any configuration changes on either FortiManager or FortiGate. FortiManager has a different FortiGuard database compared to FortiGate BR1-FGT-1 for the QUIC protocol.

Refer to the exhibit. Which statement about the environment shown in the exhibit is true? Choose one answer. You must restart the secondary device if you promote it to primary. No FortiGuard packages have been synchronized between the cluster members. A failover will take place after five minutes without receiving heartbeat packets. FortiAnalyzer features are not enabled on this FortiManager device.

What is the best explanation of how FortiManager helps with mass provisioning?. It upgrades the OS of each FortiGate device. It provides local FortiGuard Distribution Server (FDS) services to the network. It uses templates to configure the same settings on many devices simultaneously. It sends email alerts when new devices connect.

Refer to the exhibit. An administrator created two new meta fields in FortiManager. Which operation can you perform with these parameters?. You can add them to objects as custom attributes. You can export them to be used in other ADOMs. You can use them as variables in scripts. You can invoke them using the $ character.