Fortinet Network Security Expert FCP_FMG_AD-7.4 Real Exam Questions and Answers FREE Updated on May 11, 2025
FCP_FMG_AD-7.4 Ultimate Study Guide - Free4Torrent
Fortinet FCP_FMG_AD-7.4 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
NEW QUESTION # 25
Refer to the exhibit which shows the Download Import Report.
Why is FortiManager failing to import firewall policy ID 1?
- A. Policy ID 1 is configured from the interface any to port6. FortiManager rejects the request to import this policy because the any interface does not exist on FortiManager
- B. Policy ID 1 has an address object that already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.
- C. Policy ID 1 for this managed FortiGate already exists on FortiManager in the policy package named Remote-FortlGate.
- D. Policy ID 1 does not have the ADOM Interface mapping configured on FortiManager.
Answer: B
NEW QUESTION # 26
Refer to the exhibit.
What can you conclude from the failed installation log shown in the exhibit?
- A. Policy ID 2 is installed without a source address.
- B. Policy ID 2 will not be installed.
- C. Policy ID 2 is installed in the disabled state.
- D. Policy ID 2 is installed without the remote user student.
Answer: D
Explanation:
From the log provided in the exhibit, several conclusions can be drawn regarding the installation of Policy ID
2:
* The installation process fails when attempting to set theLDAP user "student". The log shows:
* "Attribute 'ldap-server' MUST be set.": This error indicates that when setting up the LDAP user configuration, a mandatory field (ldap-server) is missing. As a result, the configuration could not be completed for the user.
* "entry not found in datasource"and"value parse error before 'student'": These errors confirm that the user "student" could not be properly added due to a configuration issue (such as the missing LDAP server).
Because of these errors, while other configuration elements (such as source and destination interfaces, actions, and services) are properly set, the user configuration for"student"isnot applied.
Evaluation of the answer options:
* A. Policy ID 2 is installed in the disabled state.
* This isfalse. There is no indication in the log that Policy ID 2 is disabled.
* B. Policy ID 2 is installed without the remote user student.
* This istrue. Due to the failure in setting the"student"user (as indicated by the errors), the policy will be installedwithoutthat user being properly configured.
* C. Policy ID 2 will not be installed.
* This isfalse. The policy is installed, but the user configuration failed. The rest of the policy configuration appears to have proceeded without critical errors that would prevent the installation.
* D. Policy ID 2 is installed without a source address.
* This isfalse. The log shows that the source address is properly set to "all" (set srcaddr all), so this is not the cause of the issue.
From the log exhibit, we see errors related to the "ldap-server" attribute not being set and an error with the entry "student" not being found in the datasource. This indicates that Policy ID 2 will not be installed due to missing or incorrect data required for successful installation. The "Command fail. Return code -3" confirms the installation failure, so the correct answer is C.
Options A, B, and D are incorrect because:
* A suggests the policy is installed in a disabled state, which isn't supported by the log.
* B and D suggest partial installation, but the error messages indicate a complete failure to install Policy ID 2.
FortiManager References:
* Refer to FortiManager 7.4 Troubleshooting Guide: Common Errors and Log Interpretation.
NEW QUESTION # 27
Refer to the exhibit. Given the import report shown in the exhibit, how did FortiManager handle the service category named General?
- A. FortiManager ignored the firewall service category General and updated the FortiGate duplicate value in the FortiGate database.
- B. FortiManager ignored the firewall service category General but created a new service category in its database.
- C. FortiManager ignored the firewall service category General and did not update its database with the value.
- D. FortiManager ignored the firewall service category General and deleted the duplicate value in its database.
Answer: C
NEW QUESTION # 28
Refer to the exhibit.
What will happen if the script is run using theRemote FortiGate Directly (via CLI)option? (Choose two.)
- A. You must install these changes using the Install Wizard.
- B. FortiManager will create a new revision history.
- C. FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.
- D. FortiGate will auto-update the FortiManager device-level database.
Answer: B,D
NEW QUESTION # 29
What is a characteristic of the FortiManager high availability (HA) feature?
- A. Each cluster member must be upgraded manually, starting with the primary unit.
- B. The primary unit synchronizes all configuration revision with the seconday units.
- C. All secondary units must be in the same network as the primary unit.
- D. When a secondary unit is removed, FortiManager updates the managed devices using TCP port 5199.
Answer: B
NEW QUESTION # 30
Which two items does an FGFM keepalive message include? (Choose two.)
- A. FortiGate uptime
- B. FortiGate configuration checksum
- C. FortiGate IPS version
- D. FortiGate license information
Answer: B,C
NEW QUESTION # 31
Exhibit.
Given the configuration shown in the exhibit, which two statements are true? (Choose two.)
- A. The FortiManager ADOM is locked by the administrator.
- B. The FortiManager ADOM workspace mode is set to Normal
- C. An administrator can also lock the Local-FortiGate_root policy package.
- D. FortiManager is in workflow mode.
Answer: A,D
Explanation:
The provided screenshot from FortiManager shows several key elements that help answer the question:
* Thepadlock iconnext to the "Remote-FortiGate" policy package indicates that this policy package is locked, which means it is currently being edited or has been checked out by an administrator. This is typical behavior when the ADOM (Administrative Domain) workspace is inuse, and a session is active where an administrator is working on a policy package.
* Theabsence of a lock iconnext to "Local-FortiGate_root" and "default" indicates that these policy packages are not locked and are available for editing.
* Statement B(FortiManager is in workflow mode): This istrue. The fact that one of the policy packages is locked suggests that FortiManager is operating inADOM workflow modeor at least in a state where it enforces locking for editing, typically seen in Normal ADOM modes. Inworkflow mode, an administrator needs to lock a workspace before making changes.
* Statement C(The FortiManager ADOM is locked by the administrator): This istrue. The presence of the padlock on "Remote-FortiGate" signifies that the ADOM, or more specifically, this policy package within the ADOM, has been locked by the administrator.
* Statement A(An administrator can also lock the Local-FortiGate_root policy package): This isnot necessarily true. The administrator can lock the "Local-FortiGate_root" policy package, but as shown in the exhibit, it iscurrently not locked, so this option is not a certainty in this state.
* Statement D(The FortiManager ADOM workspace mode is set to Normal): This istrue, but not the best option compared to B and C, as it can be inferred that the mode is set to Normal due to the locking behavior, but the more direct information is about the ADOM being locked by an administrator.
NEW QUESTION # 32
Which statement about thepolicy lock feature on FortiManager is true?
- A. Administrators in the approval group can work concurrently on a locked policy.
- B. Policy locking is available in workspace normal mode.
- C. Locking a policy takes precedence over a locked ADOM.
- D. When a policy is locked, the ADOM that contains it is also locked.
Answer: B
NEW QUESTION # 33
Which two statements about scheduled backups on FortiManager are true? (Choose two.)
- A. They put FortiManager in offline mode.
- B. They support FTP, SCP, and SFTP.
- C. They back up all devices and the FortiGuard database.
- D. They can be configured using the CLI and the GUI.
Answer: B,D
NEW QUESTION # 34
Exhibit.
What is true about the objects highlighted in the image?
- A. They cannot be created in the global database ADOM.
- B. They can be set to optional or required.
- C. They are available across all ADOMs by default.
- D. They can be used as variables in scripts.
Answer: D
Explanation:
The objects highlighted in the image (DMZ_SUBNET, ISP1_SUBNET, LAN_SUBNET) aremetadata variables.
* C.They can be used as variables in scripts.
* These metadata variables are placeholders that can be used in FortiManager scripts to dynamically insert specific values, enabling script flexibility and scalability across multiple devices or ADOMs.
Options A, B, and D are incorrect because:
* Asuggests optional or required settings, which do not apply to metadata variables.
* Bimplies they are available across all ADOMs by default, which is not always the case.
* Dstates they cannot be created in the global database ADOM, but metadata variables are typically managed within ADOMs and can be utilized globally based on specific configurations.
FortiManager References:
* Refer to FortiManager 7.4 Administrator Guide: Using Metadata Variables and Script Management.
NEW QUESTION # 35
An administrator has assigned a global policy package to a new ADOM called ADOM1.
What will happen if the administrator tries to create a new policy package in ADOM1?
- A. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
- B. When a new policy package is created, the administrator must import the global policy package to ADOM1.
- C. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package.
- D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.
Answer: D
Explanation:
Supposing when the global pp is assigned to ADOM, the default option assign to all PP in the ADOM is let checked.
NEW QUESTION # 36
Exhibit.
An administrator would like to create three ADOMs on FortiManager with different access levels based on departments. What two conclusions can you draw from the design shown in the exhibit? (Choose two.)
- A. The FortiManager administrator must set the ADOM device mode to Advanced
- B. An administrator with the super user profile can access all the VDOMs.
- C. Policies and objects databases can be shared between the Financial and HR ADOMs.
- D. The administrator must configure FortiManager in workspace normal mode.
Answer: A,B
Explanation:
Based on the exhibit, the FortiManager administrator is setting up three ADOMs (Administrative Domains) that correspond to different departments (Financial, HR, and IT). Each ADOM has specificFortiGate devices or VDOMs (Virtual Domains) assigned to it, with different administrators managing the ADOMs.
Explanation of Options:
* A. The FortiManager administrator must set the ADOM device mode to Advanced.
* This istrue. In FortiManager, when there areVDOMs(Virtual Domains) involved, you must set the ADOM toAdvanced modeto manage VDOMs properly. The IT department ADOM includes different VDOMs from FortiGate 4 (VDOM 2 and VDOM 3), which means the ADOM mode must be inAdvancedto support managing VDOMs separately from other ADOMs.
* B. Policies and objects databases can be shared between the Financial and HR ADOMs.
* This isfalse. By default, ADOMs are separate, and policies and objects cannot be shared between them unless they are specifically designed to do so. The exhibit shows distinct ADOMs for each department, implying no direct sharing of policies and objects between Financial and HR ADOMs.
* C. An administrator with the super user profile can access all the VDOMs.
* This istrue. A FortiManager administrator with thesuper userprofile hasfull accessto all ADOMs and VDOMs, regardless of how access is restricted for individual administrators. In this case, an admin with the super user profile could access Financial, HR, and IT ADOMs, including all the VDOMs from FortiGate 4.
* D. The administrator must configure FortiManager in workspace normal mode.
* This isfalse. There is no requirement mentioned in the exhibit or scenario that mandates using workspace normal mode. Workspace mode is more related to how configuration changes are managed (locking, editing, etc.), but it doesn't affect the creation or access control of ADOMs.
Conclusion:
* Ais correct becauseAdvanced modeis necessary for managing VDOMs within ADOMs.
* Cis correct because asuper usercan access all VDOMs and ADOMs without restrictions.
NEW QUESTION # 37
Refer to the exhibit.
In the event that one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?
- A. Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.
- B. Reboot the failed device to remove its IP from the primary device.
- C. Reconfigure the primary device to remove the peer IP of the failed device.
- D. The FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.
Answer: C
NEW QUESTION # 38
Exhibit.
An administrator would like to create three ADOMs on FortiManager with different access levels based on departments. What two conclusions can you draw from the design shown in the exhibit? (Choose two.)
- A. The FortiManager administrator must set the ADOM device mode to Advanced
- B. Policies and objects databases can be shared between the Financial and HR ADOMs.
- C. An administrator with the super user profile can access all theVDOMs.
- D. The administrator must configure FortiManager in workspace normal mode.
Answer: A,C
NEW QUESTION # 39
Refer to the exhibit. A junior administrator is troubleshooting a FortiManager connectivity issue that is occurring with a managed FortiGate device.
Given the FortiManager device manager settings shown in the exhibit, what can you conclude from this scenario?
- A. The administrator must refresh the device to restore connectivity.
- B. The administrator recently restored a FortiManager configuration file.
- C. The administrator can reclaim the FortiGate to FortiManager protocol (FGFM) tunnel to get the device online.
- D. FortiManager lost internet connectivity, therefore, the device appears to be down.
Answer: B
Explanation:
FMG is in offline mode, which is activated after restoring a configuration file.
NEW QUESTION # 40
When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?
- A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
- B. FortiManager will not push the CLI commands as part of the installation that will cause the tunnel to go down.
- C. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
- D. FortiGate will reject the CLI commands that will cause the tunnel to go down.
Answer: A
NEW QUESTION # 41
Refer to the exhibit.
A junior administrator is troubleshooting a FortiManager connectivity issue that is occurring with a managed FortiGate device.
Given the FortiManager device manager settings shown in the exhibit, what can you conclude from this scenario?
- A. The administrator must refresh the device to restore connectivity.
- B. FortiManager lost internet connectivity, therefore, the device appears to be down.
- C. The administrator recently restored a FortiManager configuration file.
- D. The administrator can reclaim the FortiGate to FortiManager protocol (FGFM) tunnel to get the device online.
Answer: D
Explanation:
* Option C: The administrator can reclaim the FortiGate to FortiManager protocol (FGFM) tunnel to get the device online.This is the correct answer. The exhibit shows a device in "Unknown" status, which indicates that the FortiManager cannot currently communicate with the device. Reclaiming the FGFM tunnel will help to restore connectivity by re-establishing the management tunnel between the FortiManager and the FortiGate.
Explanation of Incorrect Options:
* Option A: The administrator must refresh the device to restore connectivityis incorrect because refreshing the device is unlikely to solve the connection issue when the status is "Unknown."
* Option B: FortiManager lost internet connectivity, therefore, the device appears to be downis incorrect because FortiManager does not require internet connectivity to manage a FortiGate; it needs a direct connection to the device.
* Option D: The administrator recently restored a FortiManager configuration fileis incorrect because the exhibit does not indicate a recent restoration of configuration.
FortiManager References:
* Refer to "FortiManager Administration Guide" and the section on "Device Management and Connectivity" for more information about reclaiming FGFM tunnels.
NEW QUESTION # 42
Which statement about the upgrade of ADOMs on FortiManager is true?
- A. To ensure database consistency, you must upgrade an ADOM before you upgrade the devices in it.
- B. ADOMs using global objects can be upgraded before or after upgrading the global database ADOM.
- C. You cannot import policies from a device until its FortiOS version matches the ADOM version.
- D. Upgrading the FortiManager version upgrades all existing ADOMs automatically.
Answer: A
NEW QUESTION # 43
What are two outcomes of ADOM revisions? (Choose two.)
- A. ADOM revisions can save the current state of all policy packages and objects for an ADOM.
- B. ADOM revisions can significantly increase the size of the configuration backups.
- C. ADOM revisions can create System Checkpoints for the FortiManager configuration.
- D. ADOM revisions can save the current state of the whole ADOM.
Answer: A,B
NEW QUESTION # 44
An administrator wants to create a policy on an ADOM that is in backup mode and install it on a FortiGate device in the same ADOM. How can the administrator perform this task?
- A. The administrator must disable the FortiManager offline mode first.
- B. The administrator must change the ADOM mode to Advanced to bring the FortiManager online.
- C. The administrator must use a FortiManager script.
- D. The administrator must use the Policy & Objects section to create a policy first.
Answer: C
Explanation:
To create and install a policy on a FortiGate device in an ADOM (Administrative Domain) that is in backup mode, the administrator must use a FortiManager script. This is because backup mode restricts direct configuration changes, and scripts can be used to push specific configuration changes without altering the ADOM mode.
Options A, C, and D are incorrect because:
* A requires the ADOM to be in normal or advanced mode to create policies directly in the Policy & Objects section.
* C suggests disabling offline mode, which is irrelevant to the backup mode configuration.
* D implies changing the ADOM mode, which is unnecessary if using a script to perform the task.
FortiManager References:
* Refer to FortiManager 7.4 Administrator Guide: Working with ADOMs and Using Scripts for managing policies in backup mode.
NEW QUESTION # 45
An administrator created a new global policy package that includes header and footer policies and then assigned it to an ADOM. What are two outcomes of this action? (Choose two.)
- A. You can edit or delete all the global objects in the global ADOM.
- B. After you assign the global policy package to an ADOM. the impacted policy packages become hidden in that ADOM.
- C. To assign another global policy package later to the same ADOM. you must unassign this policy first.
- D. You must manually move the header and footer policies after the policy assignment.
Answer: A,C
Explanation:
* Option A: To assign another global policy package later to the same ADOM, you must unassign this policy first.This is correct. FortiManager does not allow multiple global policy packages to be assigned to a single ADOM simultaneously. If you want to assign a different global policy package, the existing one must be unassigned first.
* Option C: You can edit or delete all the global objects in the global ADOM.This is correct. Once a global policy package is assigned, you have the flexibility to edit or delete global objects in the global ADOM, affecting all ADOMs to which this package is assigned.
Explanation of Incorrect Options:
* Option B: After you assign the global policy package to an ADOM, the impacted policy packages become hidden in that ADOMis incorrect because the policy packages do not become hidden; they are modified according to the global policies.
* Option D: You must manually move the header and footer policies after the policy assignmentis incorrect because header and footer policies are automatically applied when assigned.
FortiManager References:
* See the "Global Policy and ADOM Management" section in the FortiManager Administration Guide.
NEW QUESTION # 46
What is the purpose of ADOM revisions?
- A. To save the current state of the whole ADOM
- B. To revert individual policy packages and device-level settings for a managed FortiGate
- C. To save the current state of all policy packages and objects for an ADOM
- D. To save the FortiManager configuration in the System Checkpoints
Answer: C
Explanation:
* Option B: To save the current state of all policy packages and objects for an ADOMis the correct answer. ADOM (Administrative Domain) revisions in FortiManager are used to create a snapshot of the current state of all policy packages and objects associated with an ADOM. This allows administrators to save a specific configuration state and revert to it if necessary. It helps in managing changes and recovering from configuration errors or unintended changes.
* Explanation of Incorrect Options:
* Option A: To save the current state of the whole ADOMis incorrect because ADOM revisions specifically save only the policy packages and object configurations, not the entire state of the ADOM, which may include logs, reports, and other non-policy data.
* Option C: To revert individual policy packages and device-level settings for a managed FortiGateis incorrect as ADOM revisions are not meant for reverting individual policy packages or device settings; they are designed to handle the entire set of policy packages and objects within an ADOM.
* Option D: To save the FortiManager configuration in the System Checkpointsis incorrect because ADOM revisions do not function as system checkpoints for FortiManager itself; they are specific to ADOM policy packages and objects.
FortiManager References:
* Refer to the FortiManager 7.4 Administration Guide, "ADOM Management" section, which describes the purpose and usage of ADOM revisions for configuration management and restoration.
NEW QUESTION # 47
Refer to the exhibit. An administrator would like to create three ADOMs on FortiManager with different access levels based on departments.
What two conclusions can you draw from the design shown in the exhibit? (Choose two.)
- A. The FortiManager administrator must set the ADOM device mode to Advanced.
- B. An administrator with the super user profile can access all the VDOMs.
- C. Policies and objects databases can be shared between the Financial and HR ADOMs.
- D. The administrator must configure FortiManager in workspace normal mode.
Answer: A,B
NEW QUESTION # 48
......
Ultimate Guide to Prepare FCP_FMG_AD-7.4 Certification Exam for Fortinet Network Security Expert: https://www.free4torrent.com/FCP_FMG_AD-7.4-braindumps-torrent.html
Use Real FCP_FMG_AD-7.4 Dumps - Fortinet Correct Answers: https://drive.google.com/open?id=1WCh7CoxmPa8vqkfewjkMiSuel8wP1jsM