What are two expected results when both FortiManager and FortiGate are behind network address translation (NAT) devices? (Choose two.)

• A.During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
• B.FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
• C.If the FortiGate-FortiManager communication protocol (FGFM) tunnel is torn down, FortiManager will try to reestablish the FGFM tunnel.
• D.FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. What are two results from the configuration shown in the exhibit? (Choose two.)

• A.Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.
• B.The administrator can lock policy blocks and FortiManager global ADOM.
• C.The same administrator can lock more than one ADOM at the same time.
• D.The administrator must have access to the ADOM to approve changes.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.


An administrator needed to recover all the configurations related to the user, Support. The configurations were saved in configuration revision ID 9.
The administrator reverted the configuration using theConfiguration Revision Historywindow and received the CLI output shown in the exhibit.
What can you conclude from the CLI output?

• A.The administrator set the flag to 0 to prevent configuration overrides.
• B.The administrator reinstalled the policy package.
• C.The administrator needs to retrieve the device to correctly detect the FortiGate firmware version.
• D.The administrator installed only the device-level configuration.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Which two results occur if you run the script using the Device Database option? (Choose two.)

• A.The device Config Status is tagged as Modified.
• B.The script history shows the successful installation of the script on the remote FortiGate.
• C.The successful execution of a script on the Device Database creates a new revision history.
• D.The administrator must install these changes on a managed device using the Install Wizard.

Comment: *

Name: *

Email: *

Verification: *

An administrator sees that the policy package status of HQ-NGFW-1 is Never Installed.
What can you conclude from this status?

• A.The policy package was never imported to the revision history after HQ-NGFW-1 was registered on FortiManager.
• B.The policies have not yet been retrieved from the HQ-NGFW-1 device-level database of FortiManager.
• C.The firewall policies exist only in the HQ-NGFW-1 device-level database, and no policy package has been assigned to the firewall.
• D.The firewall policies were created or changed in the ADOM, and they need to be installed on the managed HQ-NGFW-1 for the first time.

Comment: *

Name: *

Email: *

Verification: *