⚡ FortiManager 7.6 | Exam Prep (Pregunta 41 a pregunta 50)

Refer to the exhibits. An administrator must replace the source LAN interface in policy ID 2 on their FortiGateRugged-70F. However, when they try to install the policy package, they receive the error shown in the exhibit. What should the administrator do to resolve the error?. Use the API to assign a system template interface for FortiGateRugged-70F model. Use a metadata variable to dynamically assign an interface when this error occurs. Create a per-device mapping for the LAN interface. Replace LAN with lan1, which is supported by FortiGateRugged-70F models.

An administrator created a new ADOM named Training for FortiGate devices only. Then, the administrator added the root FortiGate device of a Security Fabric group to the Training ADOM. Which statement correctly describes the expected result for the downstream devices in the Security Fabric, given the actions taken by the administrator? Choose one answer. The downstream devices are automatically authorized. The downstream devices will appear in the Managed FortiGate section of the root ADOM. The downstream devices show as unauthorized in the root ADOM. The downstream devices must be added using the Add Device wizard.

Which output is displayed right after moving the ISFW device from one ADOM to another?. Option A. Option B. Option C. Option D.

Refer to the exhibits. An administrator needed to recover all the configurations related to the user, Support. The configurations were saved in configuration revision ID 9. The administrator reverted the configuration using the Configuration Revision History window and received the CLI output shown in the exhibit. What can you conclude from the CLI output?. The administrator set the flag to 0 to prevent configuration overrides. The administrator reinstalled the policy package. The administrator needs to retrieve the device to correctly detect the FortiGate firmware version. The administrator installed only the device-level configuration.

If one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?. The FortiManager high availability HA state transition is transparent to administrators and does not require any reconfiguration. Run a sanity check on the failed device to make sure HA heartbeat packets are using TCP port 5199. Manually promote one of the working secondary devices to the primary role. Remove the peer IP of the failed device on the primary device.

Refer to the exhibit. An administrator has assigned the default system template to install all devices with the FortiAnalyzer IP address 10.0.13.12. However, not all FortiGate devices can reach FortiAnalyzer using the default interface. Some devices may use the LAN interface, while others may use the WAN interface. How can the administrator change the source interface for FortiGate devices using the default system template? Choose one answer. Use per-device dynamic object configurations at the ADOM level and apply them in the template. Configure a metadata variable at the ADOM level and use it in the template. Create a different system template for each FortiGate, if the configuration is different. Create a meta field on FortiManager system settings of type Device and use it in the template.

Which two statements about the integrity of databases on FortiManager are correct? Choose two answers. Scheduled backups run database integrity commands automatically. The diagnose dvm check-integrity command attempts to fix a corrupted file system. The diagnose cdb check adom-integrity command can correct issues related to locked devices. You should fix all database integrity issues before performing a script. Not following the correct upgrade path may cause inconsistencies in the databases.

An administrator sees that the policy package status of HQ-NGFW-1 is Never Installed. What can you conclude from this status? Choose one answer. The policies have not yet been retrieved from the HQ-NGFW-1 device-level database of FortiManager. The policy package was never imported to the revision history after HQ-NGFW-1 was registered on FortiManager. The firewall policies were created or changed in the ADOM, and they need to be installed on the managed HQ-NGFW-1 for the first time. The firewall policies exist only in the HQ-NGFW-1 device-level database, and no policy package has been assigned to the firewall.

Refer to the exhibit. What are two results from the configuration shown in the exhibit? (Choose two.). Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out. The administrator can lock policy blocks and FortiManager global ADOM. The same administrator can lock more than one ADOM at the same time. The administrator must have access to the ADOM to approve changes.

An administrator is copying a system template profile between ADOMs by running the following command: execute fmprofile export-profile ADOM 3547 /tmp/Backup_File output dump to file: [/tmp/Backup_File] Where does this command export the system template profile from?. FortiManager /tmp/Backup_File folder. FortiManager ADOM policy database. ADOM device database. FortiManager configuration backup file.