⚡ FortiManager 7.6 | Exam Prep (Pregunta 51 a pregunta 60)

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM. How can the customer administrator edit the global header policy of the global policy package?. The customer administrator can edit the header policy by using workspace mode on the global ADOM. The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM. The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator. The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.

Refer to the exhibit. An administrator assigned a new policy package to FortiGate HQ-NGFW-1. In the installation preview, they noticed some settings they did not modify and are unsure about the changes. Based on the exhibit, which two things will happen if they continue with the installation? (Choose two.). FortiGate HQ-NGFW-1 can use FortiManager firmware templates to upgrade firmware and ratings. FortiGate HQ-NGFW-1 can contact the FortiManager acting as FortiGuard Distribution Server (FDS) to download FortiGuard updates. FortiGate HQ-NGFW-1 will use the root_CA3 certificate in firewall address objects or policies. FortiManager will install the CA certificate named root_CA3 to authenticate FortiGate-to-FortiManager communication protocol (FGFM) tunnel connections with FortiGate HQ- NGFW-1.

You want to let multiple administrators work in the same ADOM without creating configuration conflicts. What is the best and the most effective solution to apply?. Configure RADIUS authentication to assign ADOM roles to each user. Enable workflow mode, which is the only way to prevent concurrent configuration conflicts. Assign administrators with JSON API access to the FortiManager. Activate workspace mode in the ADOM settings.

Refer to the exhibit. It uses all URLs in the list that contain the fds host name. It gets updates from the server with IP address 10.0.1.50. It connects to all servers marked as FortiGuard Distribution Network through Internet FDNI sources. It connects to the public FortiGuard servers listed in the configuration.

Refer to the exhibit. An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM. After the installation operation is performed, which IP/netmask will be installed on Remote-Firewall [VDOM1] for the LAN firewall address object?. 21.21.2.5/255.255.255.255. 172.16.5.20/255.255.255.255. 172.16.5.0/255.255.255.0. 10.10.10.5/255.255.255.255.

Refer to the exhibit. What are two results from the configuration shown in the exhibit? Choose two answers. The same administrator can lock more than one ADOM at the same time. Multiple administrators can lock and work on separate ADOMs at the same time. All changes must be approved before they can be installed on a device. Concurrent read-write access to an ADOM is disabled.

What allows FortiManager to run CLI scripts on FortiGate devices without prompting for SSH authentication each time?. FortiGate devices using the legacy login method. The secure management tunnel between FortiManager and FortiGate devices. The script using the Remote FortiGate Directly via CLI option. The script on the FortiManager device database.

An administrator wants to configure and manage multiple objects in the FortiManager database and give access to other users who work in the same database. To stay in control of the changes made to firewall policies by other team members, the administrator needs a setup where all modifications go through a central check before they can be installed. How can the administrator create this setup?. Enable the prompt asking the administrator to accept firewall policies changes before saving. Enable the workspace (for all ADOMs) to control all changes made by any administrator. Enable device lock and the advanced mode feature in the ADOM. Enable workflow mode and the ADOM lock feature.

Refer to the exhibits. An administrator has been asked to install the same policies from a central policy package onto the BR1-FGT-1 firewall. The administrator added BR1-FGT-1 as a target in the central policy package installation. What should the administrator do when reinstalling the central policy package on the BR1-FGT-1 firewall?. Assign only one policy package to the firewall because FortiManager does not allow more than one policy package assigned per device at the same time. Import the policy package to change the unknown status and synchronize the policy package. Use the install wizard to install the central policy package on the BR1-FGT-1 firewall. First resolve the modified status in the configuration and provisioning templates to allow a smooth installation.

Refer to the exhibits. FortiGate HQ-NGFW-1 downloads and validates FortiGuard databases from FortiManager which acts as a local FortiGuard Distribution Server (FDS) in a closed network. An administrator pushes a new firewall policy with an intrusion prevention system (IPS) profile from FortiManager to FortiGate HQ- NGFW-1 However, FortiGate does not recognize the new IPS signature from FortiManager. What is the most likely reason why FortiGate HQ-NGFW-1 does not recognize the new IPS signature?. FortiGate must enable rating for the FortiManager IP address, 192.168.1.120, in server list 1. FortiManager and FortiGate have different IPS database versions. The administrator must enable IPv6 connections for FortiGuard services on FortiManager. The administrator must enable the fortiguard-anycast option to correctly download all signatures from the local FDS.