Free FCP_FMG_AD-7.4 Exam Dumps

An administrator has enabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?

Correct Answer:B
✑ Option B: It allows FortiManager to respond to requests for FortiGuard services
from FortiGate devices.This is the correct answer. When Service Access is enabled on FortiManager, it allows FortiManager to act as a local FortiGuard server for the managed FortiGate devices. This enables the FortiManager to respond to requests for FortiGuard services, such as updates for antivirus, web filtering, and other security services.
Explanation of Incorrect Options:
✑ Option A: It allows administrative access to FortiManageris incorrect because Service Access is specifically for FortiGuard service communication, not for administrative access.
✑ Option C: It allows third-party applications to gain read/write access to FortiManageris incorrect because Service Access does not provide API or third- party access capabilities.
✑ Option D: It allows FortiManager to determine the connection status of managed devicesis incorrect because Service Access does not directly manage or check connectivity status of devices; it is used for FortiGuard service requests.
FortiManager References:
✑ Refer to the "FortiManager Administration Guide," particularly the sections on "Service Access Settings" and "FortiGuard Services."

Refer to the exhibit.

An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.
After the installation operation is performed, which IP/netmask is shown on FortiManager for this firewall address object for devices without a Per-Device Mapping set?

Correct Answer:B
✑ Option B: 192.168.1.0/24is the correct answer. In FortiManager, when a firewall address object is defined and used across multiple policy packages without any Per-Device Mapping, the default value configured in the object definition (192.168.1.0/255.255.255.0) is applied to all devices. The exhibit shows that the address objectLOCAL_SUBNEThas a default IP/netmask of192.168.1.0/24. Therefore, FortiManager will use this default value for any FortiGate device that does not have a specific Per-Device Mapping configured.
✑ Explanation of Incorrect Options:
FortiManager References:
✑ Refer to the FortiManager 7.4 Administration Guide, specifically in sections related to "Address Object Management" and "Per-Device Mapping," which detail the behavior of address objects without specific device mappings.

An administrator configures a new OSPF area on FortiManager and has not yet pushed the changes to the managed FortiGate device. In which database will the configuration be saved?

Correct Answer:A
When an administrator configures a new OSPF area on FortiManager but has not yet pushed the changes to the managed FortiGate device, the configuration is saved in the Device-level database.
Explanation of Options:
✑ A. Device-level database:
✑ B. ADOM-level database:
✑ C. Configuration-level database:
✑ D. Revision history database:

What is a characteristic of the FortiManager high availability (HA) feature?

Correct Answer:B
The characteristic of the FortiManager high availability (HA) feature is that the primary unit synchronizes all configuration revisions with the secondary units. This ensures that all devices in the HA cluster are up-to-date with the same configurations, providing redundancy and failover capabilities.
Options A, C, and D are incorrect because:
✑ Arefers to a specific port number (5199), but FortiManager does not specifically use TCP port 5199 to update managed devices when a secondary unit is removed.
✑ Cis incorrect as secondary units do not necessarily have to be in the same network as the primary unit; they just need to be able to communicate with each other.
✑ Dis incorrect because HA upgrades can be automated and do not require manual upgrading, starting with the primary unit.
FortiManager References:
✑ Refer to FortiManager 7.4 High Availability (HA) Guide: HA Synchronization and Configuration.

Refer to the exhibit.

Which two results occur if the script is run using the Device Database option? (Choose two.)

Correct Answer:AD
If the script is run using the "Device Database" option on FortiManager, the following occurs:
✑ A.You must install these changes on a managed device using the Install Wizard.
✑ D.The device Config Status is tagged as Modified. Options B and C are incorrect because:
✑ Bsuggests a new revision history is created, but this only happens when changes are actually installed on the managed device.
✑ Cimplies the script is directly executed on the FortiGate, which is not the case
when using the Device Database option.
FortiManager References:
✑ Refer to FortiManager 7.4 Administrator Guide: Scripting and Configuration Management.