Fortinet NSE 6 FortiManager 7.6 Administrator - NSE6_FMG_AD-7.6 Practice Questions

An administrator assigned the Training global policy package to the Branches policy package in ADOM1. Later, the administrator created a new policy package named Remotes on ADOM1.
What should the administrator do to sync the Training global policy package with the Remotes policy package in ADOM1?

A. Manually add and assign the Remotes policy package to the Training global policy package

B. Use the automatically install policies to ADOM devices method to sync from the Training global policy package to the Remotes policy package

C. Assign the Training global policy package to the Remotes policy package

D. Unassign the Training policy package and reassign it to all policy packages within ADOM1

An administrator has assigned a global policy package to a new ADOM named ADOM1. What will happen if the administrator tries to create a new policy package in ADOM1?

A. The administrator will be able to select the option to assign the global policy package to the new policy package.

B. FortiManager will automatically assign the global policy package to the new policy package.

C. FortiManager will automatically install policies on the policy package in ADOM1.

D. The administrator will have to assign the global policy package from the global ADOM.

A FortiManager administrator has moved a FortiGate device to a new ADOM, but they cannot see the policyor object configurations for that FortiGate.
What should the administrator do to see the policy or object configurations?

A. Use ADOM shared objects to restore all missing data.

B. Reset the device and add it to the new ADOM again.

C. Import the policy package manually using the Import Configuration wizard.

D. Use ADOM sync to restore the missing configurations.

Refer to the exhibit.

An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM. After the installation operation is performed, which IP/netmask will be installed on Remote-Firewall [VDOM1] for the LAN firewall address object?

A. 21.21.2.5/255.255.255.255

B. 172.16.5.20/255.255.255.255

C. 172.16.5.0/255.255.255.0

D. 10.10.10.5/255.255.255.255

An administrator created a new global policy package that includes both header policies and footer policies. What two things must the administrator know before deploying the global policy package to ADOM2? Choose two answers

A. They can promote ADOM2 objects to global objects.

B. They can assign the global policy package to all or selected policy packages within ADOM2.

C. They must install from the ADOM2 layer to FortiGate when using the Automatically install policies to ADOM devices option.

D. They can synchronize policy packages by importing from the ADOM2 policy package into the global ADOM policy package.

Refer to the exhibits

An administrator added BR1-FGT-1 to FortiManager and started importing the policy package. During the process, they saw that they need to choose values from FortiGate or FortiManager. Which conclusion is most clearly supported by the exhibits?

A. BR1-FGT-1 does not support the SSL/SSH profile with HTTPS on port 443.

B. The administrator must match the FortiOS firmware version with the FortiManager ADOM firmware version to resolve the conflict status.

C. The default Firewall Profile-Protocol-Options object is the only profile that does not significantly affect any configuration changes on either FortiManager or FortiGate.

D. FortiManager has a different FortiGuard database compared to FortiGate BR1-FGT-1 for the QUIC protocol.

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM. How can the customer administrator edit the global header policy of the global policy package?

A. The customer administrator can edit the header policy by using workspace mode on the global ADOM.

B. The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.

C. The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.

D. The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.