⚡ FortiManager 7.6 | Exam Prep

An administrator upgrades FortiManager with workspace mode per ADOM enabled to the latest version but notices that the ADOM versions did not change. Why were the ADOMs not upgraded?. The administrator did not run the database integrity check before performing the upgrade. FortiManager does not automatically upgrade ADOMs after a firmware upgrade. A FortiManager process task is stuck and blocking the ADOM upgrade, so the administrator must fix it. A user had all ADOMs locked before the upgrade, which stopped them from being upgraded.

What percentage of the available RAM is being used by the process in charge of downloading the web and email filter databases from the public FortiGuard servers?. 1.5. 3.1. 4.1. 2.9.

What are two outcomes of ADOM revisions? Choose two answers. ADOM revisions can save the current state of the entire ADOM. ADOM revisions do not increase the size of configuration backups. ADOM revisions can save the current state of all policy packages and objects for an ADOM. ADOM revisions appear in the Install Policy and Package Settings section of the install wizard.

An administrator configures a new BGP peer in the FortiManager device-level database of FortiGate. They reinstall the policy package to the managed FortiGate device without any errors. However, when the administrator logs in to FortiGate, they do not see the BGP configuration changes. What is the most likely reason why FortiManager did not push the BGP peer changes to FortiGate?. The administrator must run a sanity check on FortiManager to make sure the database is not corrupted. B. Fortigate has a BGP template assigned on the FortiManager database. C. The administrator must use the Install Wizard and select Install device settings only to push BGP settings. D. The FortiGate firmware version is different from the FortiManager ADOM version.

What is the purpose of ADOM revisions?. ADOM revisions find unused, duplicate, and unnecessary firewall policies and objects. ADOM revisions show specific changes in a policy package when it is installed. ADOM revisions compare previous snapshots of the Policy Package and ADOM-level objects with the device-level database. ADOM revisions save the current state of all policy packages and objects for an ADOM.

Refer to the exhibits. What can you conclude, based on the configuration shown in the exhibit? Choose one answer. The administrator needs to retrieve the Local-FortiGate configuration to sync with the Security Fabric group, Training. Policy sequence #1 will be installed on the internal segmentation firewall ISFW device root NAT and Trainer NAT VDOMs. Policy sequence #3 must have devices or VDOMs listed in the Install On column; otherwise, it will cause errors. The global policy package will be added to the top of the ISFW policy package.

Which is recommended when you are managing a high volume of logs in your network?. Store logs on FortiManager and use FortiView. Add and manage FortiAnalyzer from FortiManager. Enable advanced ADOM mode on FortiManager. Forward logs from FortiAnalyzer to FortiManager daily.

Which two statements about the output are true? (Choose two.). The latest revision history for the managed FortiGate does not match the device-level database. Configuration changes have been installed on FortiGate, updating policy and device-level database. The latest revision history for the managed FortiGate does match the FortiManager policy database. The system template default will override device-level database configurations.

Refer to Exhibit Which two actions will occur if you run the script using the Remote FortiGate Directly via CLI option? Choose two answers. FortiManager will provide a preview of CLI commands before executing this script on a managed FortiGate. FortiManager will create a new revision history. FortiGate will auto-updated the FortiManager device-level database. You will have to install these changes using the Install Wizard.

FortiGate is integrated with FortiAnalyzer and FortiManager. When creating a firewall policy, which attribute must an administrator include to enhance functionality and enable log recording on FortiAnalyzer and FortiManager?. Policy ID. Log ID. Universally Unique Identifier. Sequence ID.

Refer to the following configuration. config system global set workspace-mode normal end What are two results from the configuration shown in the exhibit? Choose two answers. The same administrator can lock more than one ADOM at the same time. Multiple administrators can lock and work on separate ADOMs at the same time. All changes must be approved before they can be installed on a device. Concurrent read-write access to an ADOM is disabled.

Which two conditions trigger FortiManager to create a new revision history? (Choose two.). When FortiManager installs device-level changes on a managed device. When changes to the device-level database are made on FortiManager. When FortiManager is auto-updated with configuration changes made directly on a managed device. When a provisioning template is assigned to a managed device on the device-level database.

Refer to the exhibit. Which two statements about the configuration shown in the exhibit are true? Choose two answers. An administrator can lock the Local-FortiGate_root policy package. The administrator created a snapshot of the Remote-FortiGate policy package. The FortiManager ADOM workspace mode is set to normal. The FortiManager is in workflow mode.

Refer to the exhibit. Which two results occur if you run the script using the Device Database option? (Choose two.). The device Config Status is tagged as Modified. The script history shows the successful installation of the script on the remote FortiGate. The successful execution of a script on the Device Database creates a new revision history. The administrator must install these changes on a managed device using the Install Wizard.

Which FortiGate configuration settings is part of an ADOM-level database on FortiManager?. NSX-T service template. Security template. Routing. SNMP.

Refer to the exhibits. An administrator runs the reload failure command diagnose test deploymanager reloadconf 262 on FortiManager. The administrator must use the FortiGate name instead of the ID number. The administrator just recently added FortiGate HQ-NGFW as a model device. FortiManager requires the FortiGate serial number instead of the ID number. FortiManager does not support FortiOS version 7.0.

Refer to the exhibit. If the monitored interface for the primary FortiManager device fails, what must you do to maintain high availability (HA)?. The FortiManager HA failover is transparent to administrators and does not require any additional action. Manually promote one of the working secondary devices to the primary role: and reboot the original primary device to remove the peer IP address of the failed device. Reconfigure the primary device to remove the peer IP address of the failed device from its configuration. Check the integrity database of the primary device to force a secondary device to become the new primary with all active interfaces.

Refer to the exhibits. Which IP/netmask will be present in the LAN firewall address object on the Remote-Firewall?. 172.16.0.0/255.255.255.0. 10.0.0.0/255.255.255.0. 192.168.1.0/255.255.255.0. 172.16.10.0/255.255.255.0.

While attempting to push a NetFlow configuration script through the FortiManager policy package: an administrator encounters an error stating that an object is unrecognized in line 4. What must the administrator do to successfully apply the NetFlow configuration script and avoid the object unrecognized error?. Make sure the user running the script has full access to the VDOM—AGEUSR. Run the script on the device database. Use metadata variables if they use VDOMs in the script. Create a normalized interface on the policy layer before running the script.

The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error: config vpn ipsec phase2-interface [parameter(s) invalid. detail: object mismatch] What must the administrator do to resolve the script error and successfully apply the IPsec configuration?. Add the end command after finishing the IPsec phase 1-interface configuration block. Use IPsec templates to deploy provisioning templates. Add a second config vpn ipsec phase2-interface block without linking it to phase1. Run the script using the policy package or ADOM database method.

A FortiManager administrator opens the revision history and choose to revert to a previous version. What will this action do to the current device configuration?. It will trigger an unknown device-level database status, and the administrator will have to import a policy package to sync. It will trigger a conflict status if it is using any provisioning template, and the administrator will have to install changes. It will revert both configurations: device-level database and policy layer database. It will modify the device-level database.

An administrator notices that CLI scripts are failing on some FortiGate devices because they use different FortiOS versions. Which two actions should the administrator take to fix the failing CLI scripts? Choose two answers. Create separate ADOMs for each FortiOS version. Disable CLI scripts for devices using older firmware. Modify the CLI scripts to include conditional commands based on FortiOS version. Create version-specific CLI script groups and assign them to the appropriate devices.

An administrator receives the import report after importing policies into the policy package layer. Based on the import report, how did FortiManager handle the profile-protocol-options object named default?. FortiManager deleted the duplicate value from its database. FortiManager created a new service category in its database. FortiManager did not update its database with the value. FortiManager updated the duplicate value in the FortiGate database.

Push updates are failing on a FortiGate device located behind a network address translation (NAT) device? Which two settings should the administrator check to correct this problem? (Choose two.). Make sure the NAT device IP address and the correct ports are configured on FortiManager. Make sure FortiGuard updates and web service are enabled on the FortiGuard service interface. Make sure the virtual IP address and the correct ports are configured on the NAT device. Make sure the Bind to IP address option on the FortiGuard service interface is set to the virtual IP address from the NAT device.

An administrator must create a policy and install it on a FortiGate device within an ADOM in backup mode. How can the administrator perform this task?. Use the Install Wizard located on the device manager. Enable workflow mode to allow policy creation and approval. Make sure the ADOM and FortiGate firmware versions match and use the ADOM policy package. Use a FortiManager script to apply the configuration changes.

Refer to Exhibits: An administrator has observed the performance status outputs on an HA cluster for 55 seconds. Which FortiGate is the primary?. HQ-NGFW-2 with the parameter memory-failover-threshold setting. HQ-NGFW-2 with the parameter priority setting. HQ-NGFW-1 with the parameter memory-failover-flip-timeout setting. HQ-NGFW-1 with the parameter override setting.

Refer to the exhibits. An administrator added BR1-FGT-1 to FortiManager and started importing the policy package. During the process, they saw that they need to choose values from FortiGate or FortiManager. Which conclusion is most clearly supported by the exhibits?. BR1-FGT-1 does not support the SSL/SSH profile with HTTPS on port 443. The administrator must match the FortiOS firmware version with the FortiManager ADOM firmware version to resolve the conflict status. The default Firewall Profile-Protocol-Options object is the only profile that does not significantly affect any configuration changes on either FortiManager or FortiGate. FortiManager has a different FortiGuard database compared to FortiGate BR1-FGT-1 for the QUIC protocol.

Refer to the exhibit. Which statement about the environment shown in the exhibit is true? Choose one answer. You must restart the secondary device if you promote it to primary. No FortiGuard packages have been synchronized between the cluster members. A failover will take place after five minutes without receiving heartbeat packets. FortiAnalyzer features are not enabled on this FortiManager device.

What is the best explanation of how FortiManager helps with mass provisioning?. It upgrades the OS of each FortiGate device. It provides local FortiGuard Distribution Server (FDS) services to the network. It uses templates to configure the same settings on many devices simultaneously. It sends email alerts when new devices connect.

Refer to the exhibit. An administrator created two new meta fields in FortiManager. Which operation can you perform with these parameters?. You can add them to objects as custom attributes. You can export them to be used in other ADOMs. You can use them as variables in scripts. You can invoke them using the $ character.

An administrator created a new global policy package that includes both header policies and footer policies. What two things must the administrator know before deploying the global policy package to ADOM2? Choose two answers. They can promote ADOM2 objects to global objects. They can assign the global policy package to all or selected policy packages within ADOM2. They must install from the ADOM2 layer to FortiGate when using the Automatically install policies to ADOM devices option. They can synchronize policy packages by importing from the ADOM2 policy package into the global ADOM policy package.

A FortiManager administrator has moved a FortiGate device to a new ADOM, but they cannot see the policy or object configurations for that FortiGate. What should the administrator do to see the policy or object configurations?. Use ADOM shared objects to restore all missing data. Reset the device and add it to the new ADOM again. Import the policy package manually using the Import Configuration wizard. Use ADOM sync to restore the missing configurations.

Refer to the exhibit. An administrator added a FortiGate device to FortiManager with the default object settings at the ADOM layer. What can you conclude from the import policy package process of the HQ-NGFW- 1 device?. The administrator must select Per Platform for all interfaces to correctly detect all interfaces from HQ-NGFW-1. The administrator must manually create the port4 interface on the ADOM layer to avoid import policy errors. FortiManager will create LAN, port4, and port6 as normalized interfaces at the ADOM layer. FortiGate may not work as expected when the administrator does not import all objects.

After correcting a policy package configuration issue, you want to prevent administrators from repeating the mistake that caused the issue. Which FortiManager approach best meets this need?. Configure an TCL script to run locally on FortiManager for each FortiGate. Restrict administrators with an administration profile from viewing the revision history to limit who can make changes. Enable the change note to require administrators to add a note whenever they change object configurations. Enable a workflow requiring approval before installing policy packages on any FortiGate.

What are two expected results when both FortiManager and FortiGate are behind network address translation NAT devices? Choose two answers. FortiGate is discovered by FortiManager through the FortiGate NATed IP address. During discovery, the FortiManager NATed IP address is not set by default on FortiGate. FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management. If the FortiGate–FortiManager communication protocol FGFM tunnel is torn down, FortiManager will try to reestablish the FGFM tunnel.

An administrator suspects that the Collector Agent is not forwarding login events to FortiGate. What is the most effective troubleshooting step?. Verify if DC agent is enabled on the FortiGate. Restart the domain controller to refresh authentication services. Verify if FortiGate is set to use LDAP authentication instead of FSSO. Check if TCP port 8000 is open between the collector agent and FortiGate.

Refer to the exhibits. An administrator needs to push a FortiToken Mobile to assign it to HR_user in the HQ-NGFW-1. However, when installing the policy package, they receive the following error message: Why is the administrator not able to install the FortiToken on the HQ-NGFW-1 firewall?. The administrator must use a user local meta field to assign FortiToken. The administrator must use a valid FortiToken that exists on HQ-NGFW-1. The administrator must use a metadata variable to assign the same FortiToken to multiple users in FortiManager. The administrator must use per-device mapping to assign the FortiToken to HQ-NGFW-1.

Company policy dictates that any time a change is made to a policy package on FortiManager an ADOM revision is created before the change installed, and that revision is held for a minimum of 90 days. Over the past three months, each installed change has resulted in several unused policies and duplicate objects. The FortiManager administrator plans to upgrade the FortiGate devices and then upgrade the FortiManager ADOM from version 7.4 to 7.6. Which action can the administrator take to avoid slow ADOM upgrades?. Check and repair the global configuration database before upgrading. Export firewall policies to Excel, delete them on the ADOM. then reimport them after upgrading the ADOM. Find unused firmware templates, then delete them before upgrading. Limit ADOM revisions before upgrading.

An administrator has a FortiGate-HQ device with VDOMs—root, HR and Facilities, currently managed under the FortiManager ADOM—Site1. They try to move VDOM HR to the FortiManager ADOM—Site2, but it does not work. Why is the administrator not able to move FortiGate-HQ VDOM HR to FortiManager ADOM—Site2?. The FortiGate-HQ must be managed under the FortiManager ADOM—root to allow moving its VDOMs to different ADOMs. The administrator must have full access in the device layer of FortiGate-HQ VDOM-root before they can VDOMs to different ADOMs. FortiManager must be in ADOM normal mode, which does not allow VDOMs to be managed separately. The administrator must delete the FortiGate-HQ device from FortiManager and add it again using the Add Device wizard before moving the VDOM.

Refer to the exhibit. What can you conclude from the downloaded import report?. FortiManager does not support per-device mapping for firewall addresses. The administrator will see a new policy package named Remote-FortiGate_root in the FortiManager ADOM database. FortiManager will change the configuration of REMOTE_SUBNET to match the interface mapping coming in from Remote-FortiGate. As a result of this policy import process, FortiManager will create a new firewall address called REMOTE_SUBNET in the ADOM database.

Refer to the exhibits. An administrator must replace the source LAN interface in policy ID 2 on their FortiGateRugged-70F. However, when they try to install the policy package, they receive the error shown in the exhibit. What should the administrator do to resolve the error?. Use the API to assign a system template interface for FortiGateRugged-70F model. Use a metadata variable to dynamically assign an interface when this error occurs. Create a per-device mapping for the LAN interface. Replace LAN with lan1, which is supported by FortiGateRugged-70F models.

An administrator created a new ADOM named Training for FortiGate devices only. Then, the administrator added the root FortiGate device of a Security Fabric group to the Training ADOM. Which statement correctly describes the expected result for the downstream devices in the Security Fabric, given the actions taken by the administrator? Choose one answer. The downstream devices are automatically authorized. The downstream devices will appear in the Managed FortiGate section of the root ADOM. The downstream devices show as unauthorized in the root ADOM. The downstream devices must be added using the Add Device wizard.

Which output is displayed right after moving the ISFW device from one ADOM to another?. Option A. Option B. Option C. Option D.

Refer to the exhibits. An administrator needed to recover all the configurations related to the user, Support. The configurations were saved in configuration revision ID 9. The administrator reverted the configuration using the Configuration Revision History window and received the CLI output shown in the exhibit. What can you conclude from the CLI output?. The administrator set the flag to 0 to prevent configuration overrides. The administrator reinstalled the policy package. The administrator needs to retrieve the device to correctly detect the FortiGate firmware version. The administrator installed only the device-level configuration.

If one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?. The FortiManager high availability HA state transition is transparent to administrators and does not require any reconfiguration. Run a sanity check on the failed device to make sure HA heartbeat packets are using TCP port 5199. Manually promote one of the working secondary devices to the primary role. Remove the peer IP of the failed device on the primary device.

Refer to the exhibit. An administrator has assigned the default system template to install all devices with the FortiAnalyzer IP address 10.0.13.12. However, not all FortiGate devices can reach FortiAnalyzer using the default interface. Some devices may use the LAN interface, while others may use the WAN interface. How can the administrator change the source interface for FortiGate devices using the default system template? Choose one answer. Use per-device dynamic object configurations at the ADOM level and apply them in the template. Configure a metadata variable at the ADOM level and use it in the template. Create a different system template for each FortiGate, if the configuration is different. Create a meta field on FortiManager system settings of type Device and use it in the template.

Which two statements about the integrity of databases on FortiManager are correct? Choose two answers. Scheduled backups run database integrity commands automatically. The diagnose dvm check-integrity command attempts to fix a corrupted file system. The diagnose cdb check adom-integrity command can correct issues related to locked devices. You should fix all database integrity issues before performing a script. Not following the correct upgrade path may cause inconsistencies in the databases.

An administrator sees that the policy package status of HQ-NGFW-1 is Never Installed. What can you conclude from this status? Choose one answer. The policies have not yet been retrieved from the HQ-NGFW-1 device-level database of FortiManager. The policy package was never imported to the revision history after HQ-NGFW-1 was registered on FortiManager. The firewall policies were created or changed in the ADOM, and they need to be installed on the managed HQ-NGFW-1 for the first time. The firewall policies exist only in the HQ-NGFW-1 device-level database, and no policy package has been assigned to the firewall.

Refer to the exhibit. What are two results from the configuration shown in the exhibit? (Choose two.). Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out. The administrator can lock policy blocks and FortiManager global ADOM. The same administrator can lock more than one ADOM at the same time. The administrator must have access to the ADOM to approve changes.

An administrator is copying a system template profile between ADOMs by running the following command: execute fmprofile export-profile ADOM 3547 /tmp/Backup_File output dump to file: [/tmp/Backup_File] Where does this command export the system template profile from?. FortiManager /tmp/Backup_File folder. FortiManager ADOM policy database. ADOM device database. FortiManager configuration backup file.

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM. How can the customer administrator edit the global header policy of the global policy package?. The customer administrator can edit the header policy by using workspace mode on the global ADOM. The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM. The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator. The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.

Refer to the exhibit. An administrator assigned a new policy package to FortiGate HQ-NGFW-1. In the installation preview, they noticed some settings they did not modify and are unsure about the changes. Based on the exhibit, which two things will happen if they continue with the installation? (Choose two.). FortiGate HQ-NGFW-1 can use FortiManager firmware templates to upgrade firmware and ratings. FortiGate HQ-NGFW-1 can contact the FortiManager acting as FortiGuard Distribution Server (FDS) to download FortiGuard updates. FortiGate HQ-NGFW-1 will use the root_CA3 certificate in firewall address objects or policies. FortiManager will install the CA certificate named root_CA3 to authenticate FortiGate-to-FortiManager communication protocol (FGFM) tunnel connections with FortiGate HQ- NGFW-1.

You want to let multiple administrators work in the same ADOM without creating configuration conflicts. What is the best and the most effective solution to apply?. Configure RADIUS authentication to assign ADOM roles to each user. Enable workflow mode, which is the only way to prevent concurrent configuration conflicts. Assign administrators with JSON API access to the FortiManager. Activate workspace mode in the ADOM settings.

Refer to the exhibit. It uses all URLs in the list that contain the fds host name. It gets updates from the server with IP address 10.0.1.50. It connects to all servers marked as FortiGuard Distribution Network through Internet FDNI sources. It connects to the public FortiGuard servers listed in the configuration.

Refer to the exhibit. An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM. After the installation operation is performed, which IP/netmask will be installed on Remote-Firewall [VDOM1] for the LAN firewall address object?. 21.21.2.5/255.255.255.255. 172.16.5.20/255.255.255.255. 172.16.5.0/255.255.255.0. 10.10.10.5/255.255.255.255.

Refer to the exhibit. What are two results from the configuration shown in the exhibit? Choose two answers. The same administrator can lock more than one ADOM at the same time. Multiple administrators can lock and work on separate ADOMs at the same time. All changes must be approved before they can be installed on a device. Concurrent read-write access to an ADOM is disabled.

What allows FortiManager to run CLI scripts on FortiGate devices without prompting for SSH authentication each time?. FortiGate devices using the legacy login method. The secure management tunnel between FortiManager and FortiGate devices. The script using the Remote FortiGate Directly via CLI option. The script on the FortiManager device database.

An administrator wants to configure and manage multiple objects in the FortiManager database and give access to other users who work in the same database. To stay in control of the changes made to firewall policies by other team members, the administrator needs a setup where all modifications go through a central check before they can be installed. How can the administrator create this setup?. Enable the prompt asking the administrator to accept firewall policies changes before saving. Enable the workspace (for all ADOMs) to control all changes made by any administrator. Enable device lock and the advanced mode feature in the ADOM. Enable workflow mode and the ADOM lock feature.

Refer to the exhibits. An administrator has been asked to install the same policies from a central policy package onto the BR1-FGT-1 firewall. The administrator added BR1-FGT-1 as a target in the central policy package installation. What should the administrator do when reinstalling the central policy package on the BR1-FGT-1 firewall?. Assign only one policy package to the firewall because FortiManager does not allow more than one policy package assigned per device at the same time. Import the policy package to change the unknown status and synchronize the policy package. Use the install wizard to install the central policy package on the BR1-FGT-1 firewall. First resolve the modified status in the configuration and provisioning templates to allow a smooth installation.

Refer to the exhibits. FortiGate HQ-NGFW-1 downloads and validates FortiGuard databases from FortiManager which acts as a local FortiGuard Distribution Server (FDS) in a closed network. An administrator pushes a new firewall policy with an intrusion prevention system (IPS) profile from FortiManager to FortiGate HQ- NGFW-1 However, FortiGate does not recognize the new IPS signature from FortiManager. What is the most likely reason why FortiGate HQ-NGFW-1 does not recognize the new IPS signature?. FortiGate must enable rating for the FortiManager IP address, 192.168.1.120, in server list 1. FortiManager and FortiGate have different IPS database versions. The administrator must enable IPv6 connections for FortiGuard services on FortiManager. The administrator must enable the fortiguard-anycast option to correctly download all signatures from the local FDS.

What can you conclude from the failed installation log shown in the exhibit?. Policy ID 2 is installed in the disabled state. Policy ID 2 will not be installed. Policy ID 2 is installed without a source address. Policy ID 2 is installed without the remote user student.

An administrator has assigned a global policy package to a new ADOM named ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?. The administrator will be able to select the option to assign the global policy package to the new policy package. FortiManager will automatically assign the global policy package to the new policy package. FortiManager will automatically install policies on the policy package in ADOM1. The administrator will have to assign the global policy package from the global ADOM.

Refer to the exhibit. FortiManager is operating behind a network address translation (NAT) device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings. FortiManager sets both the 100.65.0.120 IP address and 10.0.13.120 IP address on FortiGate. FortiManager sets both the 100.65.0.120 IP address and 100.65.0.101 IP address on FortiGate. FortiManager sets the 100.65.0.101 IP address on FortiGate. FortiManager sets the 100.65.0.120 IP address on FortiGate.

An administrator assigned the Training global policy package to the Branches policy package in ADOM1. Later, the administrator created a new policy package named Remotes on ADOM1. What should the administrator do to sync the Training global policy package with the Remotes policy package in ADOM1?. Manually add and assign the Remotes policy package to the Training global policy package. Use the automatically install policies to ADOM devices method to sync from the Training global policy package to the Remotes policy package. Assign the Training global policy package to the Remotes policy package. Unassign the Training policy package and reassign it to all policy packages within ADOM1.

Refer to Exhibit: An administrator admin used the Configuration Revision History window to revert the FortiGate device configuration to revision ID 6. After running the reinstall policy package, the administrator noticed problems with the firewall policy- they could not see the unset comment on policy ID 1. Why did FortiManager not remove the comment from policy ID 1 when the administrator ran reinstall policy package?. Because the administrator student must install the configuration changes to correctly see the expected results. Because the administrator must import the firewall policies to update the firewall policy package. Because every time the administrator uses the revert config file, they must use the Install Wizard instead of running the reinstall policy package. Because the administrator used the Revision Diff view, which shows what changed, not what will be installed.