Free FCP_FMG_AD-7.6: FCP - FortiManager 7.6 Administrator Exam Questions and Answers

Company policy dictates that any time a change is made to a policy package on FortiManager an ADOM revision is created before the change installed, and that revision is held for a minimum of 90 days. Over the past three months, each installed change has resulted in several unused policies and duplicate objects. The FortiManager administrator plans to upgrade the FortiGate devices and then upgrade the FortiManager ADOM from version 7.4 to 7.6. Which action can the administrator take to avoid slow ADOM upgrades?

• AA. Check and repair the global configuration database before upgrading.
• BB. Export firewall policies to Excel, delete them on the ADOM. then reimport them after upgradingthe ADOM.
• CC. Find unused firmware templates, then delete them before upgrading.
• DD. Limit ADOM revisions before upgrading.

Refer to the exhibits. An administrator runs the reload failure commanddiagnose test deploymanager reloadconf 262on FortiManager. Why does the administrator receive an error message?

• AA. The administrator must use the FortiGate name instead of the ID number.
• BB. The administrator just recently added FortiGate HQ-NGFW as a model device.
• CC. FortiManager requires the FortiGate serial number instead of the ID number.
• DD. FortiManager does not support FortiOS version 7.0.

Which is recommended when you are managing a high volume of logs in your network?

• AA. Store logs on FortiManager and use FortiView.
• BB. Add and manage FortiAnalyzer from FortiManager.
• CC. Enable advanced ADOM mode on FortiManager.
• DD. Forward logs from FortiAnalyzer to FortiManager daily.

Refer to the exhibit. An administrator added a FortiGate device to FortiManager with the default object settings at the ADOM layer. What can you conclude from the import policy package process of the HQ-NGFW- 1 device?

• AA. The administrator must select Per Platform for all interfaces to correctly detect all interfaces from HQ- NGFW-1.
• BB. The administrator must manually create the port4 interface on the ADOM layer to avoid import policy errors.
• CC. FortiManager will create LAN, port4, and port6 as normalized interfaces at the ADOM layer.
• DD. FortiGate may not work as expected when the administrator does not import all objects.

Refer to the exhibit. An administrator assigned a new policy package to FortiGate HQ-NGFW-1. In the installation preview, they noticed some settings they did not modify and are unsure about the changes. Based on the exhibit, which two things will happen if they continue with the installation? (Choose two.)

Select 2 answers.

• AA. FortiGate HQ-NGFW-1 can use FortiManager firmware templates to upgrade firmware and ratings.
• BB. FortiGate HQ-NGFW-1 can contact the FortiManager acting as FortiGuard Distribution Server (FDS) to download FortiGuard updates.
• CC. FortiGate HQ-NGFW-1 will use the root_CA3 certificate in firewall address objects or policies.
• DD. FortiManager will install the CA certificate named root_CA3 to authenticate FortiGate-to-FortiManager communication protocol (FGFM) tunnel connections with FortiGate HQ- NGFW-1.

An administrator wants to configure and manage multiple objects in the FortiManager database and give access to other users who work in the same database. To stay in control of the changes made to firewall policies by other team members, the administrator needs a setup where all modifications go through a central check before they can be installed. How can the administrator create this setup?

• AA. Enable the prompt asking the administrator to accept firewall policies changes before saving.
• BB. Enable the workspace (for all ADOMs) to control all changes made by any administrator.
• CC. Enable device lock and the advanced mode feature in the ADOM.
• DD. Enable workflow mode and the ADOM lock feature.

Refer to the exhibit. What can you conclude from the downloaded import report?

• AA. FortiManager does not support per-device mapping for firewall addresses.
• BB. The administrator will see a new policy package named Remote-FortiGate_root in the FortiManager ADOM database.
• CC. FortiManager will change the configuration of REMOTE_SUBNET to match the interface mapping coming in from Remote-FortiGate.
• DD. As a result of this policy import process, FortiManager will create a new firewall address called REMOTE_SUBNET in the ADOM database.

While attempting to push a NetFlow configuration script through the FortiManager policy package: an administrator encounters an error stating that an object is unrecognized in line 4. What must the administrator do to successfully apply the NetFlow configuration script and avoid the object unrecognized error?

• AA. Make sure the user running the script has full access to the VDOM—AGEUSR.
• BB. Run the script on the device database.
• CC. Use metadata variables if they use VDOMs in the script.
• DD. Create a normalized interface on the policy layer before running the script.

What is the purpose of ADOM revisions?

• AA. ADOM revisions find unused, duplicate, and unnecessary firewall policies and objects.
• BB. ADOM revisions show specific changes in a policy package when it is installed.
• CC. ADOM revisions compare previous snapshots of the Policy Package and ADOM-level objects with the device-level database.
• DD. ADOM revisions save the current state of all policy packages and objects for an ADOM.

Push updates are failing on a FortiGate device located behind a network address translation (NAT) device? Which two settings should the administrator check to correct this problem? (Choose two.)

Select 2 answers.

• AA. Make sure the NAT device IP address and the correct ports are configured on FortiManager.
• BB. Make sure FortiGuard updates and web service are enabled on the FortiGuard service interface.
• CC. Make sure the virtual IP address and the correct ports are configured on the NAT device.
• DD. Make sure the Bind to IP address option on the FortiGuard service interface is set to the virtual IP address from the NAT device.