Fortinet NSE6_FMG_AD-7.6 - Fortinet NSE 6 - FortiManager 7.6 Administrator Exam
Page: 2 / 7
Total 33 questions
Question #6 (Topic: Exam A)
An administrator upgrades FortiManager with workspace mode (per ADOM) enabled to the latest version but notices that the ADOM versions did not change.
Why were the ADOMs not upgraded?
Why were the ADOMs not upgraded?
A. FortiManager does not automatically upgrade ADOMs after a firmware upgrade.
B. A FortiManager process task is stuck and blocking the ADOM upgrade, so the administrator must fix it.
C. The administrator did not run the database integrity check before performing the upgrade.
D. A user had all ADOMs locked before the upgrade, which stopped them from being upgraded.
Answer: A
Question #7 (Topic: Exam A)
Which two conditions trigger FortiManager to create a new revision history? (Choose two.)
A. When FortiManager is auto-updated with configuration changes made directly on a managed device
B. When FortiManager installs device-level changes on a managed device
C. When a provisioning template is assigned to a managed device on the device-level database
D. When changes to the device-level database are made on FortiManager
Answer: AB
Question #8 (Topic: Exam A)
The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error:
config vpn ipsec phase2-interface [parameter(s) invalid. detail: object mismatch]
What must the administrator do to resolve the script error and successfully apply the IPsec configuration?
config vpn ipsec phase2-interface [parameter(s) invalid. detail: object mismatch]
What must the administrator do to resolve the script error and successfully apply the IPsec configuration?
A. Use IPsec templates to deploy provisioning templates.
B. Run the script using the policy package or ADOM database method.
C. Add the end command after finishing the IPsec phase 1-interface configuration block.
D. Add a second config vpn ipsec phase2-interface block without linking it to phase1.
Answer: C
Question #9 (Topic: Exam A)
Push updates are failing on a FortiGate device located behind a network address translation (NAT) device?
Which two settings should the administrator check to correct this problem? (Choose two.)
Which two settings should the administrator check to correct this problem? (Choose two.)
A. Make sure FortiGuard updates and web service are enabled on the FortiGuard service interface.
B. Make sure the NAT device IP address and the correct ports are configured on FortiManager.
C. Make sure the virtual IP address and the correct ports are configured on the NAT device.
D. Make sure the Bind to IP address option on the FortiGuard service interface is set to the virtual IP address from the NAT device.
Answer: BC
Question #10 (Topic: Exam A)
An administrator must create a policy and install it on a FortiGate device within an ADOM in backup mode. How can the administrator perform this task?
A. Enable workflow mode to allow policy creation and approval.
B. Make sure the ADOM and FortiGate firmware versions match and use the ADOM policy package.
C. Use the Install Wizard located on the device manager.
D. Use a FortiManager script to apply the configuration changes.
Answer: D
