Question 1

A service provider administrator has assigned a global policy package to a managed customer ADOM namedMy_ADOM. The customer administrator has access only to My_ADOM.How can the customer administrator edit the global header policy of the global policy package?

Options :

A : The customer administrator can edit the header policy by using workspace mode on the global ADOM.

B : The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.

C : The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.

D : The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.

Answer: D

Question 2

Refer to the exhibit.Which statement about the environment shown in the exhibit is true? Choose one answer

Options :

A : You must restart the secondary device if you promote it to primary.

B : No FortiGuard packages have been synchronized between the cluster members.

C : A failover will take place after five minutes without receiving heartbeat packets.

D : FortiAnalyzer features are not enabled on this FortiManager device.

Answer: D

Question 3

What is the best explanation of how FortiManager helps with mass provisioning?

Options :

A : It upgrades the OS of each FortiGate device.

B : It provides local FortiGuard Distribution Server (FDS) services to the network.

C : It uses templates to configure the same settings on many devices simultaneously.

D : It sends email alerts when new devices connect.

Answer: C

Question 4

An administrator notices that CLI scripts are failing on some FortiGate devices because they use differentFortiOS versions.Which two actions should the administrator take to fix the failing CLI scripts? Choose two answers.

Options :

A : Create separate ADOMs for each FortiOS version.

B : Disable CLI scripts for devices using older firmware.

C : Modify the CLI scripts to include conditional commands based on FortiOS version.

D : Create version-specific CLI script groups and assign them to the appropriate devices.

Answer: A,D

Question 5

Refer to Exhibit:An administrator admin used the Configuration Revision History window to revert the FortiGate device configuration to revision ID 6. After running the reinstall policy package, the administrator noticed problems with the firewall policy- they could not see the unset comment on policy ID 1.Why did FortiManager not remove the comment from policy ID 1 when the administrator ran reinstall policy package?

Options :

A : Because the administrator student must install the configuration changes to correctly see the expected results.

B : Because the administrator must import the firewall policies to update the firewall policy package.

C : Because every time the administrator uses the revert config file, they must use the Install Wizard instead of running the reinstall policy package.

D : Because the administrator used the Revision Diff view, which shows what changed, not what will be installed.

Answer: B