Fortinet FCP_FMG_AD-7.4 Exam Practice Test Instant Access

Question 1

If both FortiManager and FortiGate are behind NAT devices, what are the two expected results? (Choose two.)

AFortiGate is discovered by FortiManager through the FortiGate NATed IP address.

BFortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.

CIf the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

DDuring discovery, the FortiManager NATed IP address is not set by default on FortiGate.

Answer : A, D

Question 2

Which two statements about the integrity of databases on FortiManager are correct? (Choose two.)

AThe diagnose dvm check-integrity command attempts to fix a corrupted file system.

BScheduled backups run database integrity commands automatically.

CNot following the correct upgrade path may cause inconsistencies in the databases.

DYou should fix all database integrity issues before performing a backup.

EThe diagnose cdb check adom-integrity command can correct issues related to looked devices.

Answer : B, C

Question 3

Which two statements about scheduled backups on FortiManager are true? (Choose two.)

AThey back up all devices and the FortiGuard database.

BThey can be configured using the CLI and the GUI.

CThey put FortiManager in offline mode.

DThey support FTP, SCP, and SFTP.

Answer : B, D

They can be configured using the CLI and the GUI.

Scheduled backups can indeed be set up through both the FortiManager command-line interface (CLI) and the graphical user interface (GUI), providing flexibility for administrators.

They support FTP, SCP, and SFTP.

FortiManager supports multiple protocols for backup transfers, including FTP, SCP, and SFTP, allowing administrators to choose the method that best suits their environment.

Question 4

An administrator created a new ADOM named Training for FortiGate devices only, and added the root FortiGate device of a Security Fabric group to the Training ADOM.

Given the administrator's actions, which statement correctly describes the expected result for the downstream devices in the Security Fabric?

AThe downstream devices show as unauthorized in the Training ADOM

BThe downstream devices are automatically authorized.

CThe downstream devices will appear in the root ADOM.

DThe downstream devices must be added using the Add Device wizard.

Answer : A

When a root FortiGate device is added to a specific ADOM (like Training), the downstream devices (those that are part of the Security Fabric) will not automatically be authorized in that ADOM. They will typically appear as unauthorized until explicitly authorized by an administrator.

Question 5

An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.

How should the workspace mode settings be configured on FortiManager?

ASet to workspace and using the policy locking feature

BSet to read/write and using the policy locking feature

CSet to workflow and using the ADOM locking feature

DSet to normal and using the approval group feature

Answer : C

In workflow mode, changes made by junior administrators can be submitted for review. The administrator can then approve or reject these changes before they are applied. This ensures proper oversight and control over policy changes.

Question 6

Refer to the exhibit.

Which statement about the environment shown in the exhibit is correct?

AYou must restart the secondary unit if you promote it to become the primary.

BA failover will take place after five minutes without receiving heartbeat packets.

CFortiAnalyzer features are not enabled on this FortiManager device.

DNo FortiGuard packages have been synchronized between the cluster members yet.

Answer : C

Question 7

What are two outcomes of ADOM revisions? (Choose two.)

AADOM revisions can create System Checkpoints for the FortiManager configuration.

BADOM revisions can save the current state of the whole ADOM.

CADOM revisions can significantly increase the size of the configuration backups.

DADOM revisions can save the current state of all policy packages and objects for an ADOM.

Answer : C, D

Fortinet FCP_FMG_AD-7.4 FCP - FortiManager 7.4 Administrator Exam Practice Test