Course 2025 FCP_FMG_AD-7.4 Test Prep Training Practice Exam Download [Q33-Q51]

Q33. Refer to the exhibit. A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM, which has four policy packages. The customer administrator has access only to My_ADOM.
How can the customer or service provider administrators remove the global header policy from the policy package named Shared_Package?

The service provider administrator can unassign the global policy from My_ADOM.

The customer administrator can unassign the global policy from My_ADOM.

The customer administrator can unassign the policy by locking My_ADOM.

The service provider administrator can unassign the policy from the global ADOM.

Q34. An administrator configures a new OSPF area on FortiManager and has not yet pushed the changes to the managed FortiGate device. In which database will the configuration be saved?

Device-level database

ADOM-level database

Configuration-level database

Revision history database

Q35. Refer to the exhibit. Given the configuration shown in the exhibit, what are two results from this configuration? (Choose two.)

Unlocking an ADOM will submit configuration changes automatically to the approval administrator.

Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.

Unlocking an ADOM will install configuration changes automatically on managed devices.

The same administrator can lock more than one ADOM at the same time.

Q36. When using the FortiManager JSON API, what is the purpose of the session ID received after successful authentication?

It is used to identify the FortiManager metadata on the client.

It includes a hash to check the integrity of the JSON response sent by FortiManager.

It contains information about the HTTP request method used.

It serves as an authentication token for subsequent API requests.

Q37. An administrator has assigned a global policy package to custom ADOM1. Then the administrator creates a new policy package. Fortinet. in the custom ADOM1. What happens to the Fortinet policy package when it is created?

You must assign the global policy package from the global ADOM.

The global policy package is automatically assigned.

You must reapply the global policy package to ADOM1.

You can select the option to assign the global policies.

Q38. Which two statements about the integrity of databases on FortiManager are correct? (Choose two.)

The diagnose dvm check-integrity command attempts to fix a corrupted file system.

Scheduled backups run database integrity commands automatically.

Not following the correct upgrade path may cause inconsistencies in the databases.

You should fix all database integrity issues before performing a backup.

The diagnose cdb check adom-integrity command can correct issues related to looked devices.

Q39. Exhibit.

An administrator would like to create three ADOMs on FortiManager with different access levels based on departments. What two conclusions can you draw from the design shown in the exhibit? (Choose two.)

The FortiManager administrator must set the ADOM device mode to Advanced

Policies and objects databases can be shared between the Financial and HR ADOMs.

An administrator with the super user profile can access all theVDOMs.

The administrator must configure FortiManager in workspace normal mode.

Q40. An administrator runs the reload failure command diagnose test deploymanager reloadconf
<deviceid> on FortiManager.
What does this command do?

It compares and provides differences in configuration on FortiManager with the current running configuration of the specified FortiGate.

It downloads the latest configuration from the specified FortiGate and performs a reload operation on the device database.

It reloads the policy package from the FortiManager to FortiGate.

It installs the latest configuration on the specified FortiGate and updates the revision history database.

Q41. What are two outcomes of ADOM revisions? (Choose two.)

ADOM revisions can create System Checkpoints for the FortiManager configuration.

ADOM revisions can save the current state of the whole ADOM.

ADOM revisions can significantly increase the size of the configuration backups.

ADOM revisions can save the current state of all policy packages and objects for an ADOM.

Q42. Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

When changes to the device-level database are made on FortiManager

When FortiManager is auto-updated with configuration changes made directly on a managed device

When a configuration revision is reverted to a previous revision in the revision history

When FortiManager installs device-level changes on a managed device

Q43. Refer to the exhibit. An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.
After the installation operation is performed, which IP/netmask is shown on FortiManager for this firewall address object for devices without a Per-Device Mapping set?

FortiManager generates an error for each FortiGate without a per-device mapping defined for that object.

192.168.1.0/24

192.168.1.0/28

FortiManager replaces the address object to none.

Q44. What happens if you create an ADOM with version 7.2, add FortiGate devices running FortiOS
7.2, and then upgrade the FortiGate devices to FortiOS 7.4?

The ADOM can concurrently manage FortiGate devices running different firmware versions.

Adding higher version FortiGate devices to a lower version ADOM triggers an automatic ADOM upgrade.

The ADOM restricts access to devices running lower firmware versions.

Upgrading the FortiGate devices to FortiOS 7.4 may result in ADOM database corruption.

Q45. An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the workspace mode settings be configured on FortiManager?

Set to workspace and using the policy locking feature

Set to read/write and using the policy locking feature

Set to workflow and using the ADOM locking feature

Set to normal and using the approval group feature

Q46. Refer to the exhibit. An administrator is importing a new device into FortiManager and has selected the options shown in the exhibit.
What will happen if the administrator makes changes and then installs the modified policy package on this managed FortiGate?

Policies not imported prompt a confirmation before being deleted.

Policies not imported are marked as modified for future import attempts.

Policies not imported remain untouched on the managed FortiGate.

Policies not imported are deleted on the managed FortiGate during the installation.

Q47. Refer to the exhibit. What will happen if the script is run using the Remote FortiGate Directly (via CLI) option? (Choose two.)

FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

FortiManager will create a new revision history.

FortiGate will auto-update the FortiManager device-level database.

You must install these changes using the Install Wizard.

Q48. What is a characteristic of the FortiManager high availability (HA) feature?

When a secondary unit is removed, FortiManager updates the managed devices using TCP port 5199.

The primary unit synchronizes all configuration revision with the seconday units.

All secondary units must be in the same network as the primary unit.

Each cluster member must be upgraded manually, starting with the primary unit.

Q49. What is a characteristic of the FortiManager high availability (HA) feature?

When a secondary unit is removed, FortiManager updates the managed devices using TCP port 5199.

The primary unit synchronizes all configuration revision with the seconday units.

All secondary units must be in the same network as the primary unit.

Each cluster member must be upgraded manually, starting with the primary unit.

Q50. Refer to the exhibit. What percent of the available RAM is being used by the process in charge of downloading the web and email filter databases from the public FortiGuard servers?