Question 1

Push updates are failing on a FortiGate device that is located behind a NAT device. Which two settings should the administrator check? (Choose two.)

Accepted Answer

When push updates are failing on a FortiGate device behind a NAT device, the administrator should check:
? A.That the override server IP address is set on FortiManager and the NAT device.
? D.That the virtual IP address and correct ports are set on the NAT device. Options B and C are incorrect because:
? Bsuggests setting the external IP on the NAT device to DHCP, which is not relevant to solving the push update issue.
? Cimplies configuring NAT device IP and ports on FortiManager, which is less likely needed compared to configuring the correct VIP and ports.
FortiManager References:
? Refer to FortiManager 7.4 Administrator Guide: Device Management and NAT Configuration.

Question 2

An administrator is in the process of copying a system template profile between ADOMs by running the following command: execute fmprofile import-profile
ADOM2 3547 /tmp/myfile Where does this command import the system template profile from?

Accepted Answer

The commandexecute fmprofile import-profile ADOM2 3547 /tmp/myfileis used to import a system template profile from the FortiManager file system. The
path/tmp/myfileindicates a location in the FortiManager's local file system, from which the profile will be imported into the specified ADOM.
Options B, C, and D are incorrect because:
? B, C, and Dsuggest importing from different databases, which is not accurate since the command explicitly refers to the file system location.
FortiManager References:
? Refer to FortiManager 7.4 CLI Reference Guide: Commands for Profile Management.

Question 3

Refer to the exhibit.

(35 New Questions)
Which two results occur if the script is run using the Device Database option? (Choose two.)

Accepted Answer

If the script is run using the "Device Database" option on FortiManager, the following occurs:
? A.You must install these changes on a managed device using the Install Wizard.
? D.The device Config Status is tagged as Modified. Options B and C are incorrect because:
? Bsuggests a new revision history is created, but this only happens when changes are actually installed on the managed device.
? Cimplies the script is directly executed on the FortiGate, which is not the case
when using the Device Database option.
FortiManager References:
? Refer to FortiManager 7.4 Administrator Guide: Scripting and Configuration Management.

Question 4

(35 New Questions)
Which statement about the upgrade of ADOMs on FortiManager is true?

Accepted Answer

? Option A: To ensure database consistency, you must upgrade an ADOM before you upgrade the devices in it.This is the correct answer. When upgrading
ADOMs on FortiManager, the ADOM must be upgraded first to match the FortiOS version of the devices it manages. This is necessary to ensure compatibility and
consistency between the ADOM's database schema and the FortiGate's configuration.
Explanation of Incorrect Options:
? Option B: Upgrading the FortiManager version upgrades all existing ADOMs automaticallyis incorrect because the ADOMs must be upgraded manually or
individually after upgrading the FortiManager.
? Option C: You cannot import policies from a device until its FortiOS version matches the ADOM versionis incorrect because while version matching is important,
it is not strictly necessary for policy import.
? Option D: ADOMs using global objects can be upgraded before or after upgrading the global database ADOMis incorrect as the order of upgrade matters to
maintain compatibility.
FortiManager References:
? Refer to "FortiManager Upgrade Guide" for detailed procedures on upgrading ADOMs and devices.

Question 5

Which API method is used to create objects or overwrite existing ones?

Accepted Answer

In the context of the FortiManager JSON API, thesetmethod is used tocreate new objects oroverwrite existing ones. The API allows administrators to manage
FortiManager and its associated devices by automating tasks like configuration changes, policy updates, and object creation.
Explanation of Options:
? A. Set:
? B. Add:
? C. Exec:
? D. Update:

Question 6

Exhibit.
Given the configuration shown in the exhibit, what are two results from this configuration?
{Choose two.)

Accepted Answer

The configuration shown in the exhibit sets theworkspace-mode to normal. The workspace mode in FortiManager defines how configuration changes and
administrative tasks are handled, specifically regarding locking and collaboration in ADOMs (Administrative Domains).
Understanding the workspace modes:
? Normal Mode:In this mode, only one administrator at a time can lock and edit an ADOM. The changes made by one administrator must be completed and saved
before another administrator can make changes. It prevents concurrent read-write access within the same ADOM.
? Workflow Mode:This mode allows multiple administrators to work on different tasks within the same ADOM, but changes still need to be approved before being
committed.
Explanation of Options:
? A. You can validate administrator login attempts through external servers.
? B. The same administrator can lock more than one ADOM at the same time.
? C. Two or more administrators can make configuration changes at the same time, in the same ADOM.

(35 New Questions)
? D. Concurrent read-write access to an ADOM is disabled.

Question 7

What is the purpose of ADOM revisions?

Accepted Answer

? Option B: To save the current state of all policy packages and objects for an ADOMis the correct answer. ADOM (Administrative Domain) revisions in
FortiManager are used to create a snapshot of the current state of all policy packages and objects associated with an ADOM. This allows administrators to save a
specific configuration state and revert to it if necessary. It helps in managing changes and recovering from configuration errors or unintended changes.
? Explanation of Incorrect Options:
FortiManager References:
? Refer to the FortiManager 7.4 Administration Guide, "ADOM Management" section, which describes the purpose and usage of ADOM revisions for configuration
management and restoration.

Question 8

What will be the result of reverting to a previous revision version in the revision history?

Accepted Answer

? Option C: It will modify the device-level database.This is correct. Reverting to a previous revision version in the revision history affects the device-level database
by restoring it to the state saved in the selected revision. This ensures that any changes made after the selected revision are discarded, and the device
configuration is returned to the earlier state.
Explanation of Incorrect Options:
? Option A: It will install configuration changes to managed devices automaticallyis incorrect because reverting a revision does not automatically push changes to
the devices; it merely reverts the configuration on the FortiManager.
? Option B: It will tag the device settings status as Auto-Updateis incorrect because "Auto-Update" is not a status related to the revision history mechanism.
? Option D: It will generate a new version ID and remove all other revision history versionsis incorrect as reverting to a previous revision does not delete all other
versions; it creates a new revision point for tracking.
FortiManager References:
? Refer to the "Revision Management" section in the FortiManager Administration Guide, which provides an overview of how revisions are managed and utilized
for restoring configurations.

Question 9

An administrator wants to create a policy on an ADOM that is in backup mode and install it on a FortiGate device in the same ADOM. How can the administrator
perform this task?

Accepted Answer

To create and install a policy on a FortiGate device in an ADOM (Administrative Domain) that is in backup mode, the administrator must use a FortiManager
script. This is because backup mode restricts direct configuration changes, and scripts can be used to push specific configuration changes without altering the
ADOM mode.
Options A, C, and D are incorrect because:
? A requires the ADOM to be in normal or advanced mode to create policies directly in the Policy & Objects section.
? C suggests disabling offline mode, which is irrelevant to the backup mode configuration.
? D implies changing the ADOM mode, which is unnecessary if using a script to perform the task.
FortiManager References:
? Refer to FortiManager 7.4 Administrator Guide: Working with ADOMs and Using Scripts for managing policies in backup mode.

Question 10

An administrator enabled workspace mode and now wants to delete an address object that is currently referenced in a firewall policy. Which two results can the
administrator expect? (Choose two.)

Accepted Answer

(35 New Questions)
 When operating in workspace mode on FortiManager 7.4, the administrator must understand how object references and deletions work:
? Option C- "FortiManager will not allow the administrator to delete a referenced
address object until they lock the ADOM":In workspace mode, all changes are managed within an Administrative Domain (ADOM) scope. When an object (like an
address object) is referenced in a policy, FortiManager prevents its deletion to maintain configuration integrity. The ADOM must be locked by the administrator to
make changes to any referenced objects. This locking mechanism ensures that no unintended deletions or changes occur that could disrupt the policies or
configuration.
? Option D- "FortiManager will replace the deleted address object with the none
address object in the referenced firewall policy":If the administrator attempts to delete an address object that is currently referenced by a firewall policy,
FortiManager will replace the deleted object with the 'none' address object. This is done to maintain the policy structure and avoid policy corruption due to a
missing reference. This behavior ensures that the firewall policy remains syntactically correct, even though the specific address object is no longer in use.