[2025年02月05日] 最速合格には素晴らしいFCP_FMG_AD-7.4無料テストPDF本日更新です
無料でゲット！最新の2025年最新の有効な練習Fortinet Network Security Expert FCP_FMG_AD-7.4問題と解答でテストエンジン
Fortinet FCP_FMG_AD-7.4 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
質問 # 22
Exhibit.
Which two statements about the output are true? (Choose two.)
- A. Configuration changes directly made on FortiGate have been automatically updated to the device-level database.
- B. Configuration changes have been installed on FortiGate, which means the FortiGate configuration has been changed.
- C. The latest revision history for the managed FortiGate does not match the device-level database.
- D. The latest revision history for the managed FortiGate does match the FortiGate running configuration.
正解：B、C
解説：
The output indicates that:
* The device's status is shown as "dev-db: modified" and "conf: in sync," which means that there is a difference between the device-level database on FortiManager and the actual running configuration of the managed FortiGate. Therefore, the latest revision history for the managed FortiGate does not match the device-level database, which confirms statement A as true.
* "dm: retrieved" status indicates that configuration changes have been installed on the FortiGate, confirming statement B as true. It also means that the configuration has been modified, and those changes have been pulled from the FortiGate to the FortiManager.
Statements C and D are incorrect because:
* C is incorrect as it implies an automatic update, whereas "dev-db: modified" indicates changes have been made on the FortiGate device that are not yet reflected in the FortiManager's database.
* D is incorrect because "dev-db: modified" shows that the device-level database and running configuration are not in sync.
FortiManager References:
* Refer to the FortiManager 7.4 Administrator Guide: Device Manager > Device Status to understand the
"dev-db" and "conf" status meanings.
質問 # 23
An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package. Fortinet. in the custom ADOM1. What happens to the Fortinet policy package when it is created?
- A. The global policy package is automatically assigned.
- B. You must reapply the global policy package to ADOM1.
- C. You must assign the global policy package from the global ADOM.
- D. You can select the option to assign the global policies.
正解：A
解説：
When a new policy package is created in a custom ADOM that already has a global policy package assigned, the global policy package is automatically assigned to the new policy package. This behavior ensures consistent policy enforcement across different ADOMs.
Options A, C, and D are incorrect because:
* A and C incorrectly suggest that manual reassignment or reapplication is needed.
* D implies optional assignment, whereas it is automatically done.
FortiManager References:
* Refer to FortiManager 7.4 Administrator Guide: Working with Global and Custom ADOM Policy Packages
質問 # 24
In the event that one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?
- A. Reconfigure the primary device to remove the peer IP of the failed device.
- B. Reboot the failed device to remove its IP from the primary device.
- C. Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.
- D. The FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.
正解：A
解説：
If the secondary FortiManager fails, the administrator can reconfigure the primary device to remove the secondary configuration.
質問 # 25
Refer to the exhibit.
An administrator is about to add the FortiGate device to FortiManager using the discovery process.
FortiManager is operating behind a NAT device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings.
What is the expected result?
- A. During discovery, FortiManager sets the FortiManager NATed IP address on FortiGate.
- B. During discovery. FortiManager sets the NATed device IP address on FortiGate.
- C. During discovery, FortiManager sets both the FortiManager NATed IP address and NAT device IP address on FortiGate.
- D. During discovery. FortiManager uses only the FortiGate serial number to establish the connection.
正解：A
質問 # 26
Which two items does an FGFM keepalive message include? (Choose two.)
- A. FortiGate uptime
- B. FortiGate IPS version
- C. FortiGate license information
- D. FortiGate configuration checksum
正解：B、D
解説：
Keepalive messages, including the configuration checksums, are sent from FortiGate at configured intervals.
The messages also show the intrusion prevention system (IPS) version of the FortiGate device
質問 # 27
An administrator is in the process of copying a system template profile between ADOMs by runningthe following command: executefmprofile import-profile ADOM2 3547 /tmp/myfile Where does this command import the system template profile from?
- A. ADOM2 object database
- B. FortiManager file system
- C. Source ADOM policy database
- D. ADOM2 device database
正解：B
質問 # 28
Refer to the exhibit which shows the Download Import Report.
Why is FortiManager failing to import firewall policy ID 1?
- A. Policy ID 1 does not have the ADOM Interface mapping configured on FortiManager.
- B. Policy ID 1 for this managed FortiGate already exists on FortiManager in the policy package named Remote-FortlGate.
- C. Policy ID 1 is configured from the interface any to port6. FortiManager rejects the request to import this policy because the any interface does not exist on FortiManager
- D. Policy ID 1 has an address object that already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.
正解：C
解説：
* Option A: Policy ID 1 is configured from the interface any to port6. FortiManager rejects the request to import this policy because the any interface does not exist on FortiManager.This is the correct answer. FortiManager fails to import firewall policy ID 1 because it cannot map the "any" interface to a valid interface in its ADOM database. The error indicates that there is a binding failure due to an interface mismatch.
Explanation of Incorrect Options:
* Option B: Policy ID 1 for this managed FortiGate already exists on FortiManager in the policy package named Remote-FortiGateis incorrect because the error is related to interface mapping, not a duplicate policy ID.
* Option C: Policy ID 1 has an address object that already exists in the ADOM database with any as the interface association and conflicts with the address object interface association locally on FortiGateis incorrect because the error specifies an interface issue, not an address object conflict.
* Option D: Policy ID 1 does not have the ADOM Interface mapping configured on FortiManageris incorrect because the error directly mentions a binding failure due to the "any" interface.
FortiManager References:
* For more information, refer to the "Device Manager" section and "Configuration Import and Mapping" in the FortiManager Administration Guide.
質問 # 29
Refer to the exhibit.
What percent of the available RAM is being used by the process in charge of downloading the web and email filter databases from the public FortiGuard servers?
- A. 1.5
- B. 3.1
- C. 4.1
- D. 2.9
正解：D
解説：
In the exhibit, the FortiManager CLI output displays the results of thetopcommand, which shows system processes, CPU usage, and memory (RAM) usage. We are specifically looking for the process responsible for downloading theweb and email filter databasesfrom the public FortiGuard servers. This process is typically handled by thefgdlinkdprocess.
Key information from the output:
* Thefgdlinkdprocess is listed with aPID of 1463.
* The%MEMcolumn shows that this process is using2.9%of the available RAM.
Evaluation of Options:
* A. 2.9: This iscorrect. Thefgdlinkdprocess, which handles the web and email filter database downloads, is using2.9%of the available memory, as indicated in the%MEMcolumn.
* B. 3.1: This is incorrect. The3.1%memory usage belongs to thefwmsvrdprocess, not the fgdlinkd process.
* C. 1.5: This is incorrect. The1.5%memory usage belongs to thefclinkdprocess, not the fgdlinkd process.
* D. 4.1: This is incorrect. The4.1%memory usage belongs to thefgdsvrprocess, not the fgdlinkd process.
質問 # 30
Which statement about the policy lock feature on FortiManager is true?
- A. Policy locking is available in workspace normal mode.
- B. When a policy is locked, the ADOM that contains it is also locked.
- C. Administrators in the approval group can work concurrently on a locked policy.
- D. Locking a policy takes precedence over a locked ADOM.
正解：A
解説：
The statement that is true about the policy lock feature on FortiManager is:
* A. Policy locking is available in workspace normal mode.
In FortiManager, when working in "workspace-mode normal," policies can be locked by administrators to prevent other administrators from editing them simultaneously. This ensures that only one administrator makes changes at any given time, reducing conflicts or mistakes due to concurrent modifications.
Statements B, C, and D are incorrect because:
* B is incorrect since locking a policy does not override a locked ADOM. The ADOM lock takes precedence.
* C is incorrect because when a policy is locked, it does not necessarily mean the ADOM is locked.
* D is incorrect because administrators in the approval group cannot work concurrently on a locked policy; the policy lock prevents concurrent modifications.
FortiManager References:
* Refer to FortiManager 7.4 Administrator Guide: Policy and Objects > Policy Locking to understand how the policy lock feature functions in different workspace modes.
質問 # 31
Refer to the exhibit. In the event that the monitored interface for the primary FortiManager device fails, which action must you perform to return FortiManager high availability (HA) to a working state?
- A. Reconfigure the primary device to remove the peer IP address of the failed device from its configuration.
- B. Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP address of the failed device.
- C. Reboot the current primary device to force a secondary device to become the new primary.
- D. The FortiManager HA failover is transparent to administrators and does not require any additional action.
正解：D
解説：
No action is required because of VRRP activated on the HA configuration. The Failover will occur automatically once the monitored interface is lost.
質問 # 32
An administrator hasenabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?
- A. It allows third-party applications to gain read/write access to FortiManager.
- B. It allows FortiManager to determine the connection status of managed devices.
- C. It allows administrative access to FortiManager.
- D. It allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.
正解：D
質問 # 33
Refer to the exhibit.
An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.
After the installation operation is performed, which IP/netmask is shown on FortiManager for this firewall address object for devices without a Per-Device Mapping set?
- A. 192.168.1.0/28
- B. FortiManager generates an error for each FortiGate without a per-device mapping defined for that object.
- C. FortiManager replaces the address object to none.
- D. 192.168.1.0/24
正解：D
解説：
* Option B: 192.168.1.0/24is the correct answer. In FortiManager, when a firewall address object is defined and used across multiple policy packages without any Per-Device Mapping, the default value configured in the object definition (192.168.1.0/255.255.255.0) is applied to all devices. The exhibit shows that the address objectLOCAL_SUBNEThas a default IP/netmask of192.168.1.0/24. Therefore, FortiManager will use this default value for any FortiGate device that does not have a specific Per- Device Mapping configured.
* Explanation of Incorrect Options:
* Option A: FortiManager generates an error for each FortiGate without a per-device mapping defined for that objectis incorrect because FortiManager does not generate an error when a Per-Device Mapping is not set. Instead, it uses the default value provided in the object definition.
* Option C: 192.168.1.0/28is incorrect because the default value is192.168.1.0/24, as seen in the exhibit, not/28.
* Option D: FortiManager replaces the address object to noneis incorrect because FortiManager does not replace address objects to "none" when a Per-Device Mapping is missing; it uses the default value instead.
FortiManager References:
* Refer to the FortiManager 7.4 Administration Guide, specifically in sections related to "Address Object Management" and "Per-Device Mapping," which detail the behavior of address objects without specific device mappings.
質問 # 34
An administrator configures a new OSPF area on FortiManager and has not yet pushed the changes to the managed FortiGate device. In which database will the configuration be saved?
- A. Device-level database
- B. Revision history database
- C. Configuration-level database
- D. ADOM-level database
正解：A
解説：
When an administrator configures a new OSPF area on FortiManager but has not yet pushed the changes to the managed FortiGate device, the configuration is saved in theDevice-level database.
Explanation of Options:
* A. Device-level database:
* This istrue. When changes are made to a device's configuration on FortiManager, they are saved in theDevice-level database. This database stores the configuration for individual managed devices. The configuration changes remain here until they are pushed to the actual FortiGate device.
* B. ADOM-level database:
* This isfalse. The ADOM-level database holds configurations related to the entire ADOM (Administrative Domain), such as global settings that apply to all devices within the ADOM, rather than configurations specific to individual devices.
* C. Configuration-level database:
* This isfalse. The term "Configuration-level database" is not typically used in FortiManager terminology. Changes are stored in the device-level database and are applied when pushed to the FortiGate.
* D. Revision history database:
* This isfalse. The revision history database keeps track of previous versions of configurations after they have been pushed to the FortiGate device. It does not store unsaved or pending configurations that have not yet been applied to the device.
質問 # 35
What is the purpose of ADOM revisions?
- A. To save the current state of the whole ADOM
- B. To revert individual policy packages and device-level settings for a managed FortiGate
- C. To save the FortiManager configuration in the System Checkpoints
- D. To save the current state of all policy packages and objects for an ADOM
正解：D
解説：
* Option B: To save the current state of all policy packages and objects for an ADOMis the correct answer. ADOM (Administrative Domain) revisions in FortiManager are used to create a snapshot of the current state of all policy packages and objects associated with an ADOM. This allows administrators to save a specific configuration state and revert to it if necessary. It helps in managing changes and recovering from configuration errors or unintended changes.
* Explanation of Incorrect Options:
* Option A: To save the current state of the whole ADOMis incorrect because ADOM revisions specifically save only the policy packages and object configurations, not the entire state of the ADOM, which may include logs, reports, and other non-policy data.
* Option C: To revert individual policy packages and device-level settings for a managed FortiGateis incorrect as ADOM revisions are not meant for reverting individual policy packages or device settings; they are designed to handle the entire set of policy packages and objects within an ADOM.
* Option D: To save the FortiManager configuration in the System Checkpointsis incorrect because ADOM revisions do not function as system checkpoints for FortiManager itself; they are specific to ADOM policy packages and objects.
FortiManager References:
* Refer to the FortiManager 7.4 Administration Guide, "ADOM Management" section, which describes the purpose and usage of ADOM revisions for configuration management and restoration.
質問 # 36
Which configurationsetting for FortiGate is part oan ADOM-level database on FortiManager?
- A. Security profiles
- B. Routing
- C. NSX-T Service Template
- D. SNMP
正解：B
質問 # 37
Refer to the exhibit. An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.
After the installation operation is performed, which IP/netmask is shown on FortiManager for this firewall address object for devices without a Per-Device Mapping set?
- A. 192.168.1.0/28
- B. FortiManager generates an error for each FortiGate without a per-device mapping defined for that object.
- C. FortiManager replaces the address object to none.
- D. 192.168.1.0/24
正解：D
質問 # 38
......
FCP_FMG_AD-7.4問題集PDFで100%合格保証付き：https://jp.fast2test.com/FCP_FMG_AD-7.4-premium-file.html