試験準備には欠かさないトップクラスのFortinet FCP_FMG_AD-7.6試験学習ガイド練習問題最新版 [Q23-Q42]

試験準備には欠かさないトップクラスのFortinet FCP_FMG_AD-7.6試験学習ガイド練習問題最新版

今すぐFCP_FMG_AD-7.6問題を使おうFCP_FMG_AD-7.6問題集PDFで合格しよう

質問 # 23
A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM. How can the customer administrator edit the global header policy of the global policy package?

A. The customer administrator can edit the header policy by using workspace mode on the global ADOM.
B. The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.
C. The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.
D. The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.

正解：B

解説：
The global policy package is managed only from the global ADOM by the service provider administrator. Customer administrators with access solely to their ADOM (My_ADOM) cannot edit the global header policy; such changes must be made by the service provider administrator in the global ADOM.

質問 # 24
Refer to the exhibit.

Which two results occur if you run the script using theDevice Databaseoption? (Choose two.)

A. The script history shows the successful installation of the script on the remote FortiGate.
B. The administrator must install these changes on a managed device using the Install Wizard.
C. The successful execution of a script on the Device Database creates a new revision history.
D. The device Config Status is tagged as Modified.

正解：B、D

解説：
Running a script on the Device Database marks the configuration as modified but does not immediately apply changes to the device.
The administrator must use the Install Wizard to push and install these changes from the Device Database onto the managed device.

質問 # 25
Refer to the exhibit. Which statement about the environment shown in the exhibit is correct?

A. FortiAnalyzer features are not enabled on this FortiManager device.
B. No FortiGuard packages have been synchronized between the cluster members yet.
C. A failover will take place after five minutes without receiving heartbeat packets.
D. You must restart the secondary unit if you promote it to become the primary.

正解：A

解説：
lf FortiAnalyzer features are enabled, you cannot add FortiAnalyzer to FortiManager. You will also not be able to configure FortiManager high availability (HA).

質問 # 26
Refer to the exhibit. An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.

After the installation operation is performed, which IP/netmask will be installed on Remote- Firewall [VDOM1] for the LAN firewall address object?

A. 10.10.10.5/255.255.255.255
B. 172.16.5.20/255.255.255.255
C. 172.16.5.0/255.255.255.0
D. 21.21.2.5/255.255.255.255

正解：D

解説：
The per-device mapping overrides the global IP/netmask setting for the firewall address object.
For the device "Remote-Firewall," the mapped IP/netmask is 21.21.2.5/255.255.255.255, so this value will be installed on Remote-Firewall [VDOM1].

質問 # 27
What is the best explanation of how FortiManager helps with mass provisioning?

A. It uses templates to configure the same settings on many devices simultaneously.
B. It sends email alerts when new devices connect.
C. It provides local FortiGuard Distribution Server (FDS) services to the network.
D. It upgrades the OS of each FortiGate device.

正解：A

解説：
FortiManager helps with mass provisioning by using templates that allow administrators to configure the same settings on multiple FortiGate devices simultaneously, streamlining deployment and management.

質問 # 28
An administrator has assigned a global policy package to a new ADOM named ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

A. FortiManager will automatically assign the global policy package to the new policy package.
B. FortiManager will automatically install policies on the policy package in ADOM1.
C. The administrator will have to assign the global policy package from the global ADOM.
D. The administrator will be able to select the option to assign the global policy package to the new policy package.

正解：D

解説：
When a global policy package is assigned to an ADOM, administrators creating new policy packages within that ADOM have the option to select and assign the global policy package to the new policy package if desired.

質問 # 29
An administrator has assigned a global policy package to a new ADOM named ADOM1.
What will happen if the administrator tries to create a new policy package in ADOM1?

A. FortiManager will automatically assign the global policy package to the new policy package.
B. FortiManager will automatically install policies on the policy package in ADOM1.
C. The administrator will have to assign the global policy package from the global ADOM.
D. The administrator will be able to select the option to assign the global policy package to the new policy package.

正解：D

質問 # 30
Which output is displayed right after moving the ISFW device from one ADOM to another?

正解：D

解説：
Never Installed - The assigned policy package is not the result of an import for this device, and the package has not been installed since it has been assigned to this device.

質問 # 31
Refer to the exhibit.

An administrator added a FortiGate device to FortiManager with the default object settings at the ADOM layer.
What can you conclude from the import policy package process of the HQ-NGFW- 1 device?

A. The administrator must select Per Platform for all interfaces to correctly detect all interfaces from HQ- NGFW-1.
B. The administrator must manually create the port4 interface on the ADOM layer to avoid import policy errors.
C. FortiManager will create LAN, port4, and port6 as normalized interfaces at the ADOM layer.
D. FortiGate may not work as expected when the administrator does not import all objects.

正解：C

解説：
The import process shows that FortiManager will create normalized interfaces named LAN, port4, and port6 at the ADOM layer, mapping them to the corresponding device interfaces based on the import settings.

質問 # 32
After correcting a policy package configuration issue, you want to prevent administrators from repeating the mistake that caused the issue.
Which FortiManager approach best meets this need?

A. Enable a workflow requiring approval before installing policy packages on any FortiGate.
B. Configure an TCL script to run locally on FortiManager for each FortiGate.
C. Restrict administrators with an administration profile from viewing the revision history to limit who can make changes.
D. Enable the change note to require administrators to add a note whenever they change object configurations.

正解：A

解説：
Enabling a workflow with approval ensures that any policy package changes must be reviewed and approved before installation, preventing administrators from repeating configuration mistakes and enforcing change control.

質問 # 33
Refer to the exhibit. What will happen if the script is run using the Device Database option?
(Choose two.)

A. The successful execution of a script on the Device Database will create a new revision history.
B. You must install these changes using the Install Wizard to a managed device.
C. The Device Settings Status will be tagged as Modified.
D. The script history will show successful installation of the script on the remote FortiGate.

正解：B、C

解説：
Once scripts are run on the device database, you can then install the changes on a managed device using the installation wizard.
Since the script changed the device settings in FortiManager, the Config Status shows "Modified" and needs to be installed with Installation Wizard.

質問 # 34
Refer to the exhibit.

An administrator created two new meta fields in FortiManager.
Which operation can you perform with these parameters?

A. You can export them to be used in other ADOMs.
B. You can use them as variables in scripts.
C. You can invoke them using the $ character.
D. You can add them to objects as custom attributes.

正解：D

解説：
Meta fields in FortiManager can be added to objects as custom attributes, allowing administrators to categorize and add additional information to firewall objects for easier management and identification.

質問 # 35
An administrator must create a policy and install it on a FortiGate device within an ADOM in backup mode.
How can the administrator perform this task?

A. Make sure the ADOM and FortiGate firmware versions match and use the ADOM policy package.
B. Use the Install Wizard located on the device manager.
C. Use a FortiManager script to apply the configuration changes.
D. Enable workflow mode to allow policy creation and approval.

正解：C

解説：
In backup mode, FortiManager does not directly manage policy installation via the usual ADOM policy packages; instead, administrators use FortiManager scripts to push configuration changes, including policies, to FortiGate devices.

質問 # 36
Which two items does an FGFM keepalive message include? (Choose two.)

A. FortiGate uptime
B. FortiGate license information
C. FortiGate IPS version
D. FortiGate configuration checksum

正解：C、D

解説：
Keepalive messages, including the configuration checksums, are sent from FortiGate at configured intervals.
The messages also show the intrusion prevention system (IPS) version of the FortiGate device.

質問 # 37
Refer to the exhibit. What are two results from the configuration shown in the exhibit? (Choose two.)

A. The administrator can lock policy blocks and FortiManager global ADOM.
B. The administrator must have access to the ADOM to approve changes.
C. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.
D. The same administrator can lock more than one ADOM at the same time.

正解：A、C

解説：
In normal workspace mode, ungraceful session closures will keep the ADOM locked until the session times out, preventing other administrators from editing. Normal workspace mode allows administrators to lock policy blocks and the global ADOM, providing granular locking control.

質問 # 38
Refer to the exhibits.

FortiGate HQ-NGFW-1 downloads and validates FortiGuard databases from FortiManager which acts as a local FortiGuard Distribution Server (FDS) in a closed network. An administrator pushes a new firewall policy with an intrusion prevention system (IPS) profile from FortiManager to FortiGate HQ- NGFW-1 However, FortiGate does not recognize the new IPS signature from FortiManager.
What is the most likely reason why FortiGate HQ-NGFW-1 does not recognize the new IPS signature?

A. The administrator must enable the fortiguard-anycast option to correctly download all signatures from the local FDS.
B. FortiManager and FortiGate have different IPS database versions.
C. FortiGate must enable rating for the FortiManager IP address, 192.168.1.120, in server list 1.
D. The administrator must enable IPv6 connections for FortiGuard services on FortiManager.

正解：B

解説：
The most likely reason FortiGate HQ-NGFW-1 does not recognize the new IPS signature is that FortiManager and FortiGate have different IPS database versions. The FortiManager may have pushed a signature update that FortiGate has not yet synchronized or validated locally, causing the signature to be unrecognized.

質問 # 39
An administrator configures a new BGP peer in the FortiManager device-level database of FortiGate. They reinstall the policy package to the managed FortiGate device without any errors.
However, when the administrator logs in to FortiGate, they do not see the BGP configuration changes. What is the most likely reason why FortiManager did not push the BGP peer changes to FortiGate?

A. The FortiGate firmware version is different from the FortiManager ADOM version.
B. The administrator must use the Install Wizard and select Install device settings only to push BGP settings
C. Fortigate has a BGP template assigned on the FortiManager database.
D. The administrator must run a sanity check on FortiManager to make sure the database is not corrupted.

正解：C

解説：
If a BGP template is assigned to the FortiGate device on FortiManager, device-level BGP configurations made directly in the device-level database are overridden by the template settings, so the changes do not get pushed to the device.

質問 # 40
Which two items does an FGFM keepalive message include? (Choose two.)

A. FortiGate uptime
B. FortiGate license information
C. FortiGate IPS version
D. FortiGate configuration checksum

正解：C、D

質問 # 41
Refer to the exhibit. If the monitored interface for the primary FortiManager device fails, what must you do to maintain high availability (HA)?

A. Check the integrity database of the primary device to force a secondary device to become the new primary with all active interfaces.
B. Manually promote one of the working secondary devices to the primary role: and reboot the original primary device to remove the peer IP address of the failed device.
C. The FortiManager HA failover is transparent to administrators and does not require any additional action.
D. Reconfigure the primary device to remove the peer IP address of the failed device from its configuration.

正解：C

解説：
In a FortiManager HA cluster configured with VRRP failover, the failover process is automatic and transparent to administrators. If the monitored interface on the primary device fails, the secondary device takes over without requiring manual intervention to maintain HA.

質問 # 42
......

無料Fortinet Network Security Expert FCP_FMG_AD-7.6試験問題：https://www.passtest.jp/Fortinet/FCP_FMG_AD-7.6-shiken.html

問題集練習試験問題学習ガイドはFCP_FMG_AD-7.6試験で使える：https://drive.google.com/open?id=1yNu0PUAHCqk0Z3C7FlpVdsQr3ODjCar4

関するブログ

もっと

FCP_FMG_AD-7.6 無料問題集