Page: 1
/ 13
Total 61 questions
Refer to the exhibit.
Given the configuration shown in the exhibit, which two statements are true? (Choose two.)
- A. An administrator can also lock the Local-FortiGate_root policy package.
- B. FortiManager is in workflow mode.
- C. The FortiManager ADOM is locked by the administrator.
- D. The FortiManager ADOM workspace mode is set to Normal.
Answer : AD
An administrator enabled workspace mode and now wants to delete an address object that is currently referenced in a firewall policy.
Which two results can the administrator expect? (Choose two.)
- A. FortiManager will temporarily change the status of the referenced firewall policy to disabled.
- B. FortiManager will disable the status of the address object until the changes are installed.
- C. FortiManager will not allow the administrator to delete a referenced address object until they lock the ADOM.
- D. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy.
Answer : CD
What is the purpose of ADOM revisions?
- A. To save the current state of the whole ADOM
- B. To save the current state of all policy packages and objects for an ADOM
- C. To revert individual policy packages and device-level settings for a managed FortiGate
- D. To save the FortiManager configuration in the System Checkpoints
Answer : B
Refer to the exhibit.
An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.
After the installation operation is performed, which IP/netmask is shown on FortiManager for this firewall address object for devices without a Per-Device Mapping set?
- A. FortiManager generates an error for each FortiGate without a per-device mapping defined for that object.
- B. 192.168.1.0/24
- C. 192.168.1.0/28
- D. FortiManager replaces the address object to none.
Answer : B
Refer to the exhibit.
Which two statements about the output are true? (Choose two.)
- A. The latest revision history for the managed FortiGate does not match the device-level database.
- B. Configuration changes have been installed on FortiGate, which means the FortiGate configuration has been changed.
- C. Configuration changes directly made on FortiGate have been automatically updated to the device-level database.
- D. The latest revision history for the managed FortiGate does match the FortiGate running configuration.
Answer : AB
31 days access 