Fortimg3

An administrator needed to recover all the configurations related to the user, Support. The configurations were saved in configuration revision ID 9.

The administrator reverted the configuration using the Configuration Revision History window and received the CLI output shown in the exhibit.

What can you conclude from the CLI output?

• The administrator set the flag to 0 to prevent configuration overrides.

• The administrator reinstalled the policy package.

• The administrator needs to retrieve the device to correctly detect the FortiGate firmware version.

• The administrator installed only the device-level configuration.

What can you conclude, based on the configuration shown in the exhibit?

• Policy sequence #1 will be installed on the internal segmentation firewall (ISFW) device root [NAT] and Trainer [NAT] VDOMs.

• Policy sequence #3 must have devices or VDOMs listed in the Install On column; otherwise, it will cause errors.

• The global policy package will be added to the top of the ISFW policy package.

• The administrator needs to retrieve the Local-FortiGate configuration to sync with the Security Fabric group, Training.

The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error:

config vpn ipsec phase2-interface [parameter(s) invalid, detail: object mismatch]

What must the administrator do to resolve the script error and successfully apply the IPsec configuration?

• Add the end command after finishing the IPsec phase 1-interface configuration block.

• Use IPsec templates to deploy provisioning templates.

• Add a second config vpn ipsec phase2-interface block without linking it to phase 1.

• Run the script using the policy package or ADOM database method.

An administrator assigned the Training global policy package to the Branches policy package in ADOM1. Later, the administrator created a new policy package named Remotes on ADOM1.

What should the administrator do to sync the Training global policy package with the Remotes policy package in ADOM1?

• Manually add and assign the Remotes policy package to the Training global policy package.

• Use the automatically install policies to ADOM devices method to sync from the Training global policy package to the Remotes policy package.

• Assign the Training global policy package to the Remotes policy package.

• Unassign the Training policy package and reassign it to all policy packages within ADOM1

What can you conclude from the downloaded import report?

• FortiManager does not support per-device mapping for firewall addresses.

• The administrator will see a new policy package named Remote-FortiGate_root in the FortiManager ADOM database.

• FortiManager will change the configuration of REMOTE_SUBNET to match the interface mapping coming in from Remote-FortiGate

• As a result of this policy import process, FortiManager will create a new firewall address called REMOTE_SUBNET in the ADOM database.

What can you conclude from the failed installation log shown in the exhibit?

• Policy ID 2 is installed in the disabled state.

• Policy ID 2 will not be installed.

• Policy ID 2 is installed without a source address.

• Policy ID 2 is installed without the remote user student.

Which FortiGate configuration settings are part of an ADOM-level database on FortiManager?

• NSX-T service template

• Security template

• Routing

• SNMP

Which statement about the environment shown in the exhibit is true?

• You must restart the secondary device if you promote it to primary.

• No FortiGuard packages have been synchronized between the cluster member.

• A failover will take place after five minutes without receiving heartbeat packets.

• FortiAnalyzer features are not enabled on this FortiManager device.

An administrator configures a new BGP peer in the FortiManager device-level database of FortiGate. They reinstall the policy package to the managed FortiGate device without any errors. However, when the administrator logs in to FortiGate, they do not see the BGP configuration changes.

What is the most likely reason why FortiManager did not push the BGP peer changes to FortiGate?

• The administrator must run a sanity check on FortiManager to make sure the database is not corrupted.

• Fortigate has a BGP template assigned on the FortiManager database.

• The administrator must use the Install Wizard and select Install device settings only to push BGP settings

• The FortiGate firmware version is different from the FortiManager ADOM version.

An administrator ran the Install Wizard and selected to install both the policy package and device settings.

Why can the administrator not install the policy package on HQ-NGFW-1?

• The administrator must change the Install on column from Installation Targets to HQ-NGFW-1.

• The administrator must replace the interface Port6 with port6.

• The administrator must use the admin user to install the policy package.

• The administrator must remove the policy block assigned to HQ-NFFW-1.