Get Fortinet FCP_FMG_AD-7.4 Exam Practice Questions - Real and Updated

Answer : A

FortiManager allows for the management of devices running different firmware versions within the same ADOM. This means that devices running FortiOS 7.2 and 7.4 can be managed concurrently without causing issues.

Answer : B

Option B: 192.168.1.0/24 is the correct answer. In FortiManager, when a firewall address object is defined and used across multiple policy packages without any Per-Device Mapping, the default value configured in the object definition (192.168.1.0/255.255.255.0) is applied to all devices. The exhibit shows that the address object LOCAL_SUBNET has a default IP/netmask of 192.168.1.0/24. Therefore, FortiManager will use this default value for any FortiGate device that does not have a specific Per-Device Mapping configured.

Explanation of Incorrect Options:

Option A: FortiManager generates an error for each FortiGate without a per-device mapping defined for that object is incorrect because FortiManager does not generate an error when a Per-Device Mapping is not set. Instead, it uses the default value provided in the object definition.

Option C: 192.168.1.0/28 is incorrect because the default value is 192.168.1.0/24, as seen in the exhibit, not /28.

Option D: FortiManager replaces the address object to none is incorrect because FortiManager does not replace address objects to 'none' when a Per-Device Mapping is missing; it uses the default value instead.

FortiManager Reference:

Refer to the FortiManager 7.4 Administration Guide, specifically in sections related to 'Address Object Management' and 'Per-Device Mapping,' which detail the behavior of address objects without specific device mappings.

Answer : B

When a new policy package is created in a custom ADOM that already has a global policy package assigned, the global policy package is automatically assigned to the new policy package. This behavior ensures consistent policy enforcement across different ADOMs.

Options A, C, and D are incorrect because:

A and C incorrectly suggest that manual reassignment or reapplication is needed.

D implies optional assignment, whereas it is automatically done.

FortiManager Reference:

Refer to FortiManager 7.4 Administrator Guide: Working with Global and Custom ADOM Policy Packages

Answer : D

Security profiles (such as antivirus, web filtering, application control, etc.) are stored in the ADOM-level database because they can be shared across multiple devices within the same ADOM.

Answer : B

Meta fields in FortiManager can be used to add additional metadata or custom attributes to various objects, such as firewall addresses or other configuration objects. These meta fields help in organizing and identifying objects with custom information that is not part of the standard configuration. They are particularly useful for categorizing or tagging objects in large environments.