Dumps

1. 54.An administrator would like to create an SD-WAN using central management.

What steps does the administrator need to perform to create an SD-WAN using central management?

2. 30.View the following exhibit.

An administrator is importing a new device to FortiManager and has selected the shown options.
What will happen if the administrator makes the changes and installs the modified policy package on this
managed FortiGate?

3. 1.Which two statements about the scheduled backup of FortiManager are true? (Choose two.)

4. 13.An administrator run the reload failure command: diagnose test deploymanager reload config on FortiManager. What does this command do?

5. 36.Refer to the exhibit

Which two statements are true if the script is executed using the Device Database option? (Choose two.)

You are using the Quick Install option to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)

7. 32.View the following exhibit:

Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI)
option? (Choose two.)

If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results?
(Choose two.)

50.An administrator has enabled Service Access on FortiManager.
What is the purpose of Service Access on the FortiManager interface?

12. 7.Which two items does an FGFM keepalive message include? (Choose two.)

56.An administrator has added all the devices in a Security Fabric group to FortiManager.
How does the administrator identify the root FortiGate?

14. 24.Refer to the exhibit.

Which statement about the object named ALL is true?

61.An administrator would like to authorize a newly-installed AP using AP Manager.
What steps does the administrator need to perform to authorize an AP?

16. 38.Which two items are included in the FortiManager backup? (Choose two.)

17. 40.Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

18. 57.What does a policy package status of Modified indicate?

19. 8.Which configuration setting for FortiGate is part of a device-level database on FortiManager?

20. 52.View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

3.You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?

53.An administrator would like to create an SD-WAN default static route for a newly created SD-WAN
using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.

22. Which interface must the administrator select in the static route device drop-down list?

19.An administrator would like to review, approve, or reject all the firewall policy changes made by the
junior administrators.
How should the Workspace mode be configured on FortiManager?

24. 51.What does the diagnose dvm check-integrity command do? (Choose two.)

25. How will FortiManager try to get updates for antivirus and IPS?

26. 5.Which three settings are the factory default settings on FortiManager? (Choose three.)

65.Which of the following statements are true regarding VPN Gateway configuration in VPN Manager?
(Choose two.)

42.An administrator is replacing a device on FortiManager by running the following command:
execute device replace sn .
What device name and serial number must the administrator use?

29. 15.What are two outcomes of ADOM revisions? (Choose two.)

30. 41.Refer to the exhibit.

Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

31. 60.Which of the following statements are true regarding VPN Manager? (Choose three.)

55.Which of the following statements are true regarding schedule backup of FortiManager? (Choose
two.)

14.An administrator with the Super_User profile is unable to log in to FortiManager because of an
authentication failure message.
Which troubleshooting step should you take to resolve the issue?

34. 11.Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

35. 58.View the following exhibit.

When using Install Config option to install configuration changes to managed FortiGate, which of the
following statements are true? (Choose two.)

36. 10.What is the purpose of the Policy Check feature on FortiManager?

37. 44.What is the purpose of ADOM revisions?

39.An administrator’s PC crashes before the administrator can submit a workflow session for approval.
After the PC is restarted, the administrator notices that the ADOM was locked from the session before
the crash.
How can the administrator unlock the ADOM?

39. 46.What will be the result of reverting to a previous revision version in the revision history?

40. 23.View the following exhibit.

Which statement is true regarding this failed installation log?

41. 63.View the following exhibit:

An administrator used the value shown in the exhibit when importing a Local-FortiGate into
FortiManager.
What name will be used to display the firewall policy for port1?

42. 20.Refer to the following exhibit:

config system global
set workspace-mode normal
end

Which of the following statements are true based on this configuration? (Choose two.)

18.An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?

9.An administrator has assigned a global policy package to a new ADOM called ADOM1.
What will happen if the administrator tries to create a new policy package in ADOM1?

45. 29.View the following exhibit.

Given the configurations shown in the exhibit, what can you conclude from the installation targets in the
Install On column?

48.An administrator configures a new firewall policy on FortiManager and has not yet pushed the
changes to the managed FortiGate.
In which database will the configuration be saved?

48. 47.What does a policy package status of Conflict indicate?

49. 21.Refer to the exhibits.

Exhibit one.

Exhibit two.

An administrator created a new system template named Training with two new DNS addresses on
FortiManager. During the installation preview stage, the administrator notices that many unset
commands need to be pushed.
What can be the main reason for these unset commands?

12.When an installation is performed from FortiManager, what is the recovery logic used between
FortiManager and FortiGate for an FGFM tunnel?

51. 33.Refer to the exhibit

Which two statements about the output are true? (Choose two.)

2.In addition to the default ADOMs, an administrator has created a new ADOM named Training for
FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate.
Which one of the following statements is true?

64.Which of the following statements are true regarding reverting to previous revision version from the
revision history? (Choose two.)

54. 59.View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate
policy package.
When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for
the Training firewall address object?

57. 31.View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

58. 37.Refer to the exhibit.

An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

45.An administrator has assigned a global policy package to custom ADOM1. Then the administrator
creates a new policy package, Fortinet, in the custom ADOM1.

Which statement about the global policy package assignment to the newly-created policy package
Fortinet is true?

60. 34.Which two statements regarding device management on FortiManager are true? (Choose two.)

61. 22.An administrator would like to create an SD-WAN using central management in the Training ADOM. To create an SD-WAN using central management, which two steps must be completed? (Choose two.)

62. 62.View the following exhibit.

Which of the following statements are true based on this configuration setting? (Choose two.)

26.An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow
session that was submitted by another administrator, Student. However, Trainer is unable to approve theworkflow session.
What can prevent an admin account that has Super_User rights over the device from approving a
workflow session?

64. 35.Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

66. 6.What will happen if FortiAnalyzer features are enabled on FortiManager?

4.In the event that the primary FortiManager fails, which of the following actions must be performed to
return the FortiManager HA to a working state?

69. 49.Refer to the exhibit.

An administrator has created a firewall address object, Training which is used in the Local-FortiGate
policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate,
for the Training firewall address object?

70. 17.Which two settings must be configured for SD-WAN Central Management? (Choose two.)

An administrator has configured the command shown in the exhibit on FortiManager. A configuration
change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to
go down for more than 15 minutes.
What is the purpose of this command?