Which configuration setting for FortiGate is part of a device-level database on FortiManager?
A. VIP and IP Pools
B. Firewall policies
C. Security profiles
D. Routing
When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?
A. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
B. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
C. FortiGate will reject the CLI commands that will cause the tunnel to go down.
D. FortiManager will not push the CLI commands as a part of the installation that will cause the tunnel to go down.
Which two items does an FGFM keepalive message include? (Choose two.)
A. FortiGate uptime
B. FortiGate license information
C. FortiGate IPS version
D. FortiGate configuration checksum
Which two statements regarding device management on FortiManager are true? (Choose two.)
A. FortiGate devices in HA cluster devices are counted as a single device.
B. FortiGate in transparent mode configurations are not counted toward the device count on FortiManager.
C. FortiGate devices in an HA cluster that has five VDOMs are counted as five separate devices.
D. The maximum number of managed devices for each ADOM is 500.
What will be the result of reverting to a previous revision version in the revision history?
A. It will install configuration changes to managed device automatically
B. It will tag the device settings status as Auto-Update
C. It will generate a new version ID and remove all other revision history versions
D. It will modify the device-level database
Refer to the exhibit.
Which two statements are true if the script is executed using the Device Database option? (Choose two.)
A. You must install these changes using the Install Wizard to a managed device
B. The successful execution of a script on the Device Database will create a new revision history
C. The script history will show successful installation of the script on the remote FortiGate
D. The Device Settings Status will be tagged as Modified
Refer to the exhibit.
An administrator has created a firewall address object, Training which is used in the Local- FortiGate policy package.
When the installation operation is performed, which IP/Netmask will be installed on the Local-FortiGate, for the Training firewall address object?
A. 192.168.0.1/24
B. 10.200.1.0/24
C. It will create a firewall address group on Local-FortiGate with 192.168.0.1/24 and 10.0.1.0/24 object values.
D. Local-FortiGate will automatically choose an IP/Netmask based on its network interface settings.
An administrator would like to create an SD-WAN using central management. What steps does the administrator need to perform to create an SD-WAN using central management?
A. First create an SD-WAN firewall policy, add member interfaces to the SD-WAN template and create a static route
B. You must specify a gateway address when you create a default static route
C. Remove all the interface references such as routes or policies
D. Enable SD-WAN central management in the ADOM, add member interfaces, create a static route and SDWAN firewall policies.
View the following exhibit.
When using Install Config option to install configuration changes to managed FortiGate, which of the following statements are true? (Choose two.)
A. Once initiated, the install process cannot be canceled and changes will be installed on the managed device
B. Will not create new revision in the revision history
C. Installs device-level changes to FortiGate without launching the Install Wizard
D. Provides the option to preview configuration changes prior to installing them
An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member interfaces.
Which interface must the administrator select in the static route device drop-down list?
A. port2
B. virtual-wan-link
C. port1
D. auto-discovery
