FCP_FMG_AD-7.4リアルな試験問題FCP_FMG_AD-7.4練習問題集
厳密検証されたFCP_FMG_AD-7.4試験問題集と解答で無料提供のFCP_FMG_AD-7.4問題と正解付き
Fortinet FCP_FMG_AD-7.4 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
質問 # 17
An administrator is in the process of copying a system template profile between ADOMs by running the following command: execute fmprofile import-profile ADOM2 3547 /tmp/myfile Where does this command import the system template profile from?
- A. Source ADOM policy database
- B. ADOM2 device database
- C. FortiManager file system
- D. ADOM2 object database
正解：C
解説：
The commandexecute fmprofile import-profile ADOM2 3547 /tmp/myfileis used to import a system template profile from the FortiManager file system. The path/tmp/myfileindicates a location in the FortiManager's local file system, from which the profile will be imported into the specified ADOM.
Options B, C, and D are incorrect because:
* B, C, and Dsuggest importing from different databases, which is not accurate since the command explicitly refers to the file system location.
FortiManager References:
* Refer to FortiManager 7.4 CLI Reference Guide: Commands for Profile Management.
質問 # 18
Which two items are included in the FortiManager backup? (Choose two.)
- A. Firmware images
- B. FortiGuard database
- C. Flash configuration
- D. All devices
正解：C、D
質問 # 19
In the event that one of the secondary FortiManager devices fails, which action must be performed to return the FortiManager HA manual mode to a working state?
- A. Reboot the failed device to remove its IP from the primary device.
- B. Manually promote one of the working secondary devices to the primary role, and reboot the old primary device to remove the peer IP of the failed device.
- C. Reconfigure the primary device to remove the peer IP of the failed device.
- D. The FortiManager HA state transition is transparent to administrators and does not require any reconfiguration.
正解：B
解説：
When a secondary FortiManager device fails in HA manual mode, an administrator must manually promote one of the working secondary devices to the primary role and reboot the old primary device to remove the peer IP of the failed device. This ensures the HA configuration is updated correctly, and the network remains resilient.
Options A, B, and D are incorrect because:
* A suggests the transition is transparent, which is true only in automatic mode, not in manual mode.
* B and D imply simpler steps that do not fully address the HA reconfiguration process in manual mode.
FortiManager References:
* Refer to FortiManager 7.4 High Availability (HA) Configuration Guide: Manual Mode Configuration and Failover Procedures.
質問 # 20
Refer to the exhibit.
What can you conclude from the failed installation log shown in the exhibit?
- A. Policy ID 2 is installed without the remote user student.
- B. Policy ID 2 is installed in the disabled state.
- C. Policy ID 2 is installed without a source address.
- D. Policy ID 2 will not be installed.
正解：A
解説：
From the log provided in the exhibit, several conclusions can be drawn regarding the installation of Policy ID
2:
* The installation process fails when attempting to set theLDAP user "student". The log shows:
* "Attribute 'ldap-server' MUST be set.": This error indicates that when setting up the LDAP user configuration, a mandatory field (ldap-server) is missing. As a result, the configuration could not be completed for the user.
* "entry not found in datasource"and"value parse error before 'student'": These errors confirm that the user "student" could not be properly added due to a configuration issue (such as the missing LDAP server).
Because of these errors, while other configuration elements (such as source and destination interfaces, actions, and services) are properly set, the user configuration for"student"isnot applied.
Evaluation of the answer options:
* A. Policy ID 2 is installed in the disabled state.
* This isfalse. There is no indication in the log that Policy ID 2 is disabled.
* B. Policy ID 2 is installed without the remote user student.
* This istrue. Due to the failure in setting the"student"user (as indicated by the errors), the policy will be installedwithoutthat user being properly configured.
* C. Policy ID 2 will not be installed.
* This isfalse. The policy is installed, but the user configuration failed. The rest of the policy configuration appears to have proceeded without critical errors that would prevent the installation.
* D. Policy ID 2 is installed without a source address.
* This isfalse. The log shows that the source address is properly set to "all" (set srcaddr all), so this is not the cause of the issue.
From the log exhibit, we see errors related to the "ldap-server" attribute not being set and an error with the entry "student" not being found in the datasource. This indicates that Policy ID 2 will not be installed due to missing or incorrect data required for successful installation. The "Command fail. Return code -3" confirms the installation failure, so the correct answer is C.
Options A, B, and D are incorrect because:
* A suggests the policy is installed in a disabled state, which isn't supported by the log.
* B and D suggest partial installation, but the error messages indicate a complete failure to install Policy ID 2.
FortiManager References:
* Refer to FortiManager 7.4 Troubleshooting Guide: Common Errors and Log Interpretation.
質問 # 21
Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)
- A. The Security Fabric license, group name, and password are required for the FortiManager Security Fabric integration.
- B. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices.
- C. The Security Fabric settings are part of the device-level settings.
- D. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices.
正解：B、C
質問 # 22
An administrator enabled workspace mode and now wants to delete an address object that is currently referenced in a firewall policy. Which two results can the administrator expect? (Choose two.)
- A. FortiManager will disable the status of the address object until the changes are installed.
- B. FortiManager will temporarily change the status of the referenced firewall policy to disabled.
- C. FortiManager will replace the deleted address object with the none address object in the referenced firewall policy.
- D. FortiManager will not allow the administrator to delete a referenced address object until theylockthe ADOM.
正解：C、D
質問 # 23
An administrator hasenabled Service Access on FortiManager. What is the purpose of Service Access on the FortiManager interface?
- A. It allows third-party applications to gain read/write access to FortiManager.
- B. It allows administrative access to FortiManager.
- C. It allows FortiManager to respond to requests for FortiGuard services from FortiGate devices.
- D. It allows FortiManager to determine the connection status of managed devices.
正解：C
質問 # 24
Push updates are failing on a FortiGate device thatis located behind a NAT device. Which two settings should the administrator check? (Choose two.)
- A. That the external IP address on the NAT device is set to DHCP and configured with the virtual IP
- B. That the override server IP address is set on FortiManager and the NAT device
- C. That the NAT device IP address and correct ports are configured on FortiManager
- D. That the virtual IP address and correct ports are set on the NAT device
正解：C、D
質問 # 25
Refer to the exhibit which shows the Download Import Report.
Why is FortiManager failing to import firewall policy ID 1?
- A. Policy ID 1 does not have the ADOM Interface mapping configured on FortiManager.
- B. Policy ID 1 has an address object that already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.
- C. Policy ID 1 for this managed FortiGate already exists on FortiManager in the policy package named Remote-FortlGate.
- D. Policy ID 1 is configured from the interface any to port6. FortiManager rejects the request to import this policy because the any interface does not exist on FortiManager
正解：C
質問 # 26
Exhibit.
Which two statements about the output are true? (Choose two.)
- A. The latest revision history for the managed FortiGate does match the FortiGate running configuration.
- B. Configuration changes directly made on FortiGate have been automatically updated to the device-level database.
- C. The latest revision history for the managed FortiGate does not match the device-level database.
- D. Configuration changes have been installed on FortiGate, which means the FortiGate configuration has been changed.
正解：C、D
解説：
The output indicates that:
* The device's status is shown as "dev-db: modified" and "conf: in sync," which means that there is a difference between the device-level database on FortiManager and the actual running configuration of the managed FortiGate. Therefore, the latest revision history for the managed FortiGate does not match the device-level database, which confirms statement A as true.
* "dm: retrieved" status indicates that configuration changes have been installed on the FortiGate, confirming statement B as true. It also means that the configuration has been modified, and those changes have been pulled from the FortiGate to the FortiManager.
Statements C and D are incorrect because:
* C is incorrect as it implies an automatic update, whereas "dev-db: modified" indicates changes have been made on the FortiGate device that are not yet reflected in the FortiManager's database.
* D is incorrect because "dev-db: modified" shows that the device-level database and running configuration are not in sync.
FortiManager References:
* Refer to the FortiManager 7.4 Administrator Guide: Device Manager > Device Status to understand the
"dev-db" and "conf" status meanings.
質問 # 27
An administrator configures a new OSPF area on FortiManager and has not yet pushed the changes to the managed FortiGate device. In which database will the configuration be saved?
- A. Device-level database
- B. Revision history database
- C. ADOM-level database
- D. Configuration-level database
正解：A
質問 # 28
Which statement about the upgrade of ADOMs on FortiManager is true?
- A. Upgrading the FortiManager version upgrades all existing ADOMs automatically.
- B. ADOMs using global objects can be upgraded before or after upgrading the global database ADOM.
- C. You cannot import policies from a device until its FortiOS version matches the ADOM version.
- D. To ensure database consistency, you must upgrade an ADOM before you upgrade the devices in it.
正解：D
質問 # 29
Refer to the exhibit.
A junior administrator is troubleshooting a FortiManager connectivity issue that is occurring with a managed FortiGate device.
Given the FortiManager device manager settings shown in the exhibit, what can you conclude from this scenario?
- A. The administrator can reclaim the FortiGate to FortiManager protocol (FGFM) tunnel to get the device online.
- B. The administrator must refresh the device to restore connectivity.
- C. The administrator recently restored a FortiManager configuration file.
- D. FortiManager lost internet connectivity, therefore, the device appears to be down.
正解：A
解説：
* Option C: The administrator can reclaim the FortiGate to FortiManager protocol (FGFM) tunnel to get the device online.This is the correct answer. The exhibit shows a device in "Unknown" status, which indicates that the FortiManager cannot currently communicate with the device. Reclaiming the FGFM tunnel will help to restore connectivity by re-establishing the management tunnel between the FortiManager and the FortiGate.
Explanation of Incorrect Options:
* Option A: The administrator must refresh the device to restore connectivityis incorrect because refreshing the device is unlikely to solve the connection issue when the status is "Unknown."
* Option B: FortiManager lost internet connectivity, therefore, the device appears to be downis incorrect because FortiManager does not require internet connectivity to manage a FortiGate; it needs a direct connection to the device.
* Option D: The administrator recently restored a FortiManager configuration fileis incorrect because the exhibit does not indicate a recent restoration of configuration.
FortiManager References:
* Refer to "FortiManager Administration Guide" and the section on "Device Management and Connectivity" for more information about reclaiming FGFM tunnels.
質問 # 30
An administrator wants to create a policy on an ADOM that is in backup mode and install it on a FortiGate device in the same ADOM. How can the administrator perform this task?
- A. The administrator must disable the FortiManager offline mode first.
- B. The administrator must use the Policy & Objects section to create a policy first.
- C. The administrator must change the ADOM mode to Advanced to bring the FortiManager online.
- D. The administrator must use a FortiManager script.
正解：D
解説：
To create and install a policy on a FortiGate device in an ADOM (Administrative Domain) that is in backup mode, the administrator must use a FortiManager script. This is because backup mode restricts direct configuration changes, and scripts can be used to push specific configuration changes without altering the ADOM mode.
Options A, C, and D are incorrect because:
* A requires the ADOM to be in normal or advanced mode to create policies directly in the Policy & Objects section.
* C suggests disabling offline mode, which is irrelevant to the backup mode configuration.
* D implies changing the ADOM mode, which is unnecessary if using a script to perform the task.
FortiManager References:
* Refer to FortiManager 7.4 Administrator Guide: Working with ADOMs and Using Scripts for managing policies in backup mode.
質問 # 31
Refer to the exhibit.
Given the configuration shown in the exhibit, which two conclusions can you draw from the installation targets in the Install On column? (Choose two.)
- A. Policy seq.# 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target
- B. Policy seq.# 1 will be installed on the ISFW device root[NAT] and Student[NAT] VDOMs only.
- C. Policy seq.S will be installed on all managed devices and VDOMs that are listed under Installation Targets
- D. Policy seq.# 3 will be skipped because no installation targets are specified.
正解：B、C
解説：
* Option A: Policy seq.S will be installed on all managed devices and VDOMs that are listed under Installation Targets.This is correct. The "Install On" column indicates that the policy is targeted for installation on all listed managed devices and VDOMs under Installation Targets.
* Option D: Policy seq.# 1 will be installed on the ISFW device root[NAT] and Student[NAT] VDOMs only.This is correct. Policy sequence #1 specifies that it will be installed only on the ISFW device and the VDOMs 'root[NAT]' and 'Student[NAT]' as indicated by the "Install On" column.
Explanation of Incorrect Options:
* Option B: Policy seq.# 3 will be skipped because no installation targets are specifiedis incorrect because it is clearly listed under "Installation Targets," which means it will be installed according to the specified configuration.
* Option C: Policy seq.# 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Targetis incorrect as the exhibit does not show any specific exclusion for seq.# 2 on the Local-FortiGate root VDOM.
FortiManager References:
* Refer to the FortiManager Administration Guide sections on "Policy Packages" and "Policy Installation Targets" for more details.
質問 # 32
Which configurationsetting for FortiGate is part oan ADOM-level database on FortiManager?
- A. NSX-T Service Template
- B. Routing
- C. Security profiles
- D. SNMP
正解：B
質問 # 33
......
無料でゲット！高評価Fortinet FCP_FMG_AD-7.4試験問題集を今すぐダウンロード！：https://jp.fast2test.com/FCP_FMG_AD-7.4-premium-file.html