FCP_FMG_AD-7.6: FCP - FortiManager 7.6 Administrator Fortigate Practice Questions

Refer to the exhibit. An administrator assigned a new policy package to FortiGate HQ-NGFW-1. In the installation preview, they noticed some settings they did not modify and are unsure about the changes. Based on the exhibit, which two things will happen if they continue with the installation? (Choose two.)

Select 2 answers.

• AA. FortiGate HQ-NGFW-1 can use FortiManager firmware templates to upgrade firmware and ratings.
• BB. FortiGate HQ-NGFW-1 can contact the FortiManager acting as FortiGuard Distribution Server (FDS) to download FortiGuard updates.
• CC. FortiGate HQ-NGFW-1 will use the root_CA3 certificate in firewall address objects or policies.
• DD. FortiManager will install the CA certificate named root_CA3 to authenticate FortiGate-to-FortiManager communication protocol (FGFM) tunnel connections with FortiGate HQ- NGFW-1.

Push updates are failing on a FortiGate device located behind a network address translation (NAT) device? Which two settings should the administrator check to correct this problem? (Choose two.)

Select 2 answers.

• AA. Make sure the NAT device IP address and the correct ports are configured on FortiManager.
• BB. Make sure FortiGuard updates and web service are enabled on the FortiGuard service interface.
• CC. Make sure the virtual IP address and the correct ports are configured on the NAT device.
• DD. Make sure the Bind to IP address option on the FortiGuard service interface is set to the virtual IP address from the NAT device.