Fortinet NSE6_FMG_AD-7.6 問題集

質問 1：
Which FortiGate configuration settings is part of an ADOM-level database on FortiManager?
A. Routing
B. Security template
C. SNMP
D. NSX-T service template
正解：B

質問 2：
Refer to the exhibits.

What can you conclude, based on the configuration shown in the exhibit? Choose one answer
A. The administrator needs to retrieve the Local-FortiGate configuration to sync with the Security Fabric group, Training.
B. The global policy package will be added to the top of the ISFW policy package.
C. Policy sequence #1 will be installed on the internal segmentation firewall ISFW device root NAT and Trainer NAT VDOMs.
D. Policy sequence #3 must have devices or VDOMs listed in the Install On column; otherwise, it will cause errors.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Company policy dictates that any time a change is made to a policy package on FortiManager an ADOM revision is created before the change installed, and that revision is held for a minimum of 90 days.
Over the past three months, each installed change has resulted in several unused policies and duplicate objects.
The FortiManager administrator plans to upgrade the FortiGate devices and then upgrade the FortiManager ADOM from version 7.4 to 7.6.
Which action can the administrator take to avoid slow ADOM upgrades?
A. Export firewall policies to Excel, delete them on the ADOM. then reimport them after upgrading the ADOM.
B. Limit ADOM revisions before upgrading.
C. Check and repair the global configuration database before upgrading.
D. Find unused firmware templates, then delete them before upgrading.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
FortiGate is integrated with FortiAnalyzer and FortiManager.
When creating a firewall policy, which attribute must an administrator include to enhance functionality and enable log recording on FortiAnalyzer and FortiManager?
A. Sequence ID
B. Log ID
C. Universally Unique Identifier
D. Policy ID
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
An administrator configures a new BGP peer in the FortiManager device-level database of FortiGate. They reinstall the policy package to the managed FortiGate device without any errors. However, when the administrator logs in to FortiGate, they do not see the BGP configuration changes.
What is the most likely reason why FortiManager did not push the BGP peer changes to FortiGate?
A. The administrator must run a sanity check on FortiManager to make sure the database is not corrupted.
B. The administrator must use the Install Wizard and select Install device settings only to push BGP settings
C. Fortigate has a BGP template assigned on the FortiManager database.
D. The FortiGate firmware version is different from the FortiManager ADOM version.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Refer to the exhibits.


An administrator has been asked to install the same policies from a central policy package onto the BR1-FGT-
1 firewall.
The administrator added BR1-FGT-1 as a target in the central policy package installation.
What should the administrator do when reinstalling the central policy package on the BR1-FGT-1 firewall?
A. Use the install wizard to install the central policy package on the BR1-FGT-1 firewall.
B. Import the policy package to change the unknown status and synchronize the policy package.
C. Assign only one policy package to the firewall because FortiManager does not allow more than one policy package assigned per device at the same time.
D. First resolve the modified status in the configuration and provisioning templates to allow a smooth installation.
正解：A
解説: (Topexam メンバーにのみ表示されます)