Dumps

1. 30.View the following exhibit.

An administrator is importing a new device to FortiManager and has selected the shown options.
What will happen if the administrator makes the changes and installs the modified policy package on this
managed FortiGate?

If both FortiManager and FortiGate are behind the NAT devices, what are the two expected results?
(Choose two.)

3. 6.What will happen if FortiAnalyzer features are enabled on FortiManager?

12.When an installation is performed from FortiManager, what is the recovery logic used between
FortiManager and FortiGate for an FGFM tunnel?

5. 52.View the following exhibit.

Which one of the following statements is true regarding the object named ALL?

6. 62.View the following exhibit.

Which of the following statements are true based on this configuration setting? (Choose two.)

7. How will FortiManager try to get updates for antivirus and IPS?

14.An administrator with the Super_User profile is unable to log in to FortiManager because of an
authentication failure message.
Which troubleshooting step should you take to resolve the issue?

9. 47.What does a policy package status of Conflict indicate?

26.An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow
session that was submitted by another administrator, Student. However, Trainer is unable to approve theworkflow session.
What can prevent an admin account that has Super_User rights over the device from approving a
workflow session?

11. 5.Which three settings are the factory default settings on FortiManager? (Choose three.)

12. 60.Which of the following statements are true regarding VPN Manager? (Choose three.)

13. 58.View the following exhibit.

When using Install Config option to install configuration changes to managed FortiGate, which of the
following statements are true? (Choose two.)

15. 29.View the following exhibit.

Given the configurations shown in the exhibit, what can you conclude from the installation targets in the
Install On column?

16. 7.Which two items does an FGFM keepalive message include? (Choose two.)

An administrator has configured the command shown in the exhibit on FortiManager. A configuration
change has been installed from FortiManager to the managed FortiGate that causes the FGFM tunnel to
go down for more than 15 minutes.
What is the purpose of this command?

18. 13.An administrator run the reload failure command: diagnose test deploymanager reload config on FortiManager. What does this command do?

50.An administrator has enabled Service Access on FortiManager.
What is the purpose of Service Access on the FortiManager interface?

55.Which of the following statements are true regarding schedule backup of FortiManager? (Choose
two.)

21. 46.What will be the result of reverting to a previous revision version in the revision history?

22. 33.Refer to the exhibit

Which two statements about the output are true? (Choose two.)

23. 24.Refer to the exhibit.

Which statement about the object named ALL is true?

25. 41.Refer to the exhibit.

Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

4.In the event that the primary FortiManager fails, which of the following actions must be performed to
return the FortiManager HA to a working state?

27. 35.Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)

28. 54.An administrator would like to create an SD-WAN using central management.

What steps does the administrator need to perform to create an SD-WAN using central management?

29. 49.Refer to the exhibit.

An administrator has created a firewall address object, Training which is used in the Local-FortiGate
policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate,
for the Training firewall address object?

65.Which of the following statements are true regarding VPN Gateway configuration in VPN Manager?
(Choose two.)

31. 51.What does the diagnose dvm check-integrity command do? (Choose two.)

53.An administrator would like to create an SD-WAN default static route for a newly created SD-WAN
using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.

32. Which interface must the administrator select in the static route device drop-down list?

34. 32.View the following exhibit:

Which two statements are true if the script is executed using the Remote FortiGate Directly (via CLI)
option? (Choose two.)

36. 38.Which two items are included in the FortiManager backup? (Choose two.)

37. 40.Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

42.An administrator is replacing a device on FortiManager by running the following command:
execute device replace sn .
What device name and serial number must the administrator use?

39. 63.View the following exhibit:

An administrator used the value shown in the exhibit when importing a Local-FortiGate into
FortiManager.
What name will be used to display the firewall policy for port1?

40. 36.Refer to the exhibit

Which two statements are true if the script is executed using the Device Database option? (Choose two.)

You are using the Quick Install option to install configuration changes on the managed FortiGate.
Which two statements correctly describe the result? (Choose two.)

39.An administrator’s PC crashes before the administrator can submit a workflow session for approval.
After the PC is restarted, the administrator notices that the ADOM was locked from the session before
the crash.
How can the administrator unlock the ADOM?

19.An administrator would like to review, approve, or reject all the firewall policy changes made by the
junior administrators.
How should the Workspace mode be configured on FortiManager?

44. 44.What is the purpose of ADOM revisions?

45.An administrator has assigned a global policy package to custom ADOM1. Then the administrator
creates a new policy package, Fortinet, in the custom ADOM1.

Which statement about the global policy package assignment to the newly-created policy package
Fortinet is true?

46. 20.Refer to the following exhibit:

config system global
set workspace-mode normal
end

Which of the following statements are true based on this configuration? (Choose two.)

56.An administrator has added all the devices in a Security Fabric group to FortiManager.
How does the administrator identify the root FortiGate?

49. 8.Which configuration setting for FortiGate is part of a device-level database on FortiManager?

50. 15.What are two outcomes of ADOM revisions? (Choose two.)

64.Which of the following statements are true regarding reverting to previous revision version from the
revision history? (Choose two.)

52. 21.Refer to the exhibits.

Exhibit one.

Exhibit two.

An administrator created a new system template named Training with two new DNS addresses on
FortiManager. During the installation preview stage, the administrator notices that many unset
commands need to be pushed.
What can be the main reason for these unset commands?

53. 34.Which two statements regarding device management on FortiManager are true? (Choose two.)

54. 22.An administrator would like to create an SD-WAN using central management in the Training ADOM. To create an SD-WAN using central management, which two steps must be completed? (Choose two.)

18.An administrator wants to delete an address object that is currently referenced in a firewall policy.
What can the administrator expect to happen?

56. 37.Refer to the exhibit.

An administrator logs into the FortiManager GUI and sees the panes shown in the exhibit.
Which two reasons can explain why the FortiAnalyzer feature panes do not appear? (Choose two.)

57. 1.Which two statements about the scheduled backup of FortiManager are true? (Choose two.)

9.An administrator has assigned a global policy package to a new ADOM called ADOM1.
What will happen if the administrator tries to create a new policy package in ADOM1?

60. 59.View the following exhibit.

An administrator has created a firewall address object, Training, which is used in the Local-FortiGate
policy package.
When the install operation is performed, which IP Netmask will be installed on the Local-FortiGate, for
the Training firewall address object?

61. 23.View the following exhibit.

Which statement is true regarding this failed installation log?

48.An administrator configures a new firewall policy on FortiManager and has not yet pushed the
changes to the managed FortiGate.
In which database will the configuration be saved?

63. 31.View the following exhibit, which shows the Download Import Report:

Why it is failing to import firewall policy ID 2?

64. 57.What does a policy package status of Modified indicate?

65. 17.Which two settings must be configured for SD-WAN Central Management? (Choose two.)

3.You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?

67. 10.What is the purpose of the Policy Check feature on FortiManager?

68. 11.Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

61.An administrator would like to authorize a newly-installed AP using AP Manager.
What steps does the administrator need to perform to authorize an AP?

2.In addition to the default ADOMs, an administrator has created a new ADOM named Training for
FortiGate devices. The administrator sent a device registration to FortiManager from a remote FortiGate.
Which one of the following statements is true?