FCP_FMG_AD-7.6 Free Practice Test

Refer to the exhibit.

What are two results from the configuration shown in the exhibit? (Choose two.)

1. A. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.
2. B. The administrator can lock policy blocks and FortiManager global ADOM.
3. C. The same administrator can lock more than one ADOM at the same time.
4. D. The administrator must have access to the ADOM to approve changes.

Correct Answer: AB
In normal workspace mode, ungraceful session closures will keep the ADOM locked until the session times out, preventing other administrators from editing.
Normal workspace mode allows administrators to lock policy blocks and the global ADOM, providing granular locking control.

Refer to the exhibit.

What can you conclude from the downloaded import report?

1. A. FortiManager does not support per-device mapping for firewall addresses.
2. B. The administrator will see a new policy package named Remote-FortiGate_root in the FortiManager ADOM database.
3. C. FortiManager will change the configuration of REMOTE_SUBNET to match the interface mapping coming in from Remote-FortiGate.
4. D. As a result of this policy import process, FortiManager will create a new firewall address called REMOTE_SUBNET in the ADOM database.

Correct Answer: B
The import report shows that a new policy package named Remote-FortiGate_root will be created in the FortiManager ADOM database, but some firewall addresses and policies failed to import due to interface binding conflicts.

An administrator is copying a system template profile between ADOMs by running the following command:
execute fmprofile export-profile ADOM 3547 /tmp/Backup_File
output dump to file: [/tmp/Backup_File]
Where does this command export the system template profile from?

1. A. FortiManager /tmp/Backup_File folder
2. B. FortiManager ADOM policy database
3. C. ADOM device database
4. D. FortiManager configuration backup file

Correct Answer: B
The command exports the system template profile from the FortiManager ADOM policy database, which stores the configuration templates for devices within that ADOM.

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM.
How can the customer administrator edit the global header policy of the global policy package?

1. A. The customer administrator can edit the header policy by using workspace mode on the global ADOM.
2. B. The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.
3. C. The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.
4. D. The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.

Correct Answer: D
The global policy package is managed only from the global ADOM by the service provider administrator. Customer administrators with access solely to their ADOM (My_ADOM) cannot edit the global header policy; such changes must be made by the service provider administrator in the global ADOM.

Refer to the exhibit.

An administrator created two new meta fields in FortiManager. Which operation can you perform with these parameters?

1. A. You can add them to objects as custom attributes.
2. B. You can export them to be used in other ADOMs.
3. C. You can use them as variables in scripts.
4. D. You can invoke them using the $ character.

Correct Answer: A
Meta fields in FortiManager can be added to objects as custom attributes, allowing administrators to categorize and add additional information to firewall objects for easier management and identification.