[2025年04月22日] FCP_FMG_AD-7.4テストエンジンお試しセット、FCP_FMG_AD-7.4問題集PDF
最新のFortinet FCP_FMG_AD-7.4のPDFと問題集で（2025）無料試験問題解答
Fortinet FCP_FMG_AD-7.4 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
質問 # 10
What will be the result of reverting to a previous revision version in the revision history?
- A. It will generate a new version ID and remove all other revision history versions.
- B. It win install configuration changes to managed device automatically.
- C. It will modify the device-level database.
- D. It will tag the device settings status as Auto-Update.
正解：C
解説：
* Option C: It will modify the device-level database.This is correct. Reverting to a previous revision version in the revision history affects the device-level database by restoring it to the state saved in the selected revision. This ensures that any changes made after the selected revision are discarded, and the device configuration is returned to the earlier state.
Explanation of Incorrect Options:
* Option A: It will install configuration changes to managed devices automaticallyis incorrect because reverting a revision does not automatically push changes to the devices; it merely reverts the configuration on the FortiManager.
* Option B: It will tag the device settings status as Auto-Updateis incorrect because "Auto-Update" is not a status related to the revision history mechanism.
* Option D: It will generate a new version ID and remove all other revision history versionsis incorrect as reverting to a previous revision does not delete all other versions; it creates a new revision point for tracking.
FortiManager References:
* Refer to the "Revision Management" section in the FortiManager Administration Guide, which provides an overview of how revisions are managed and utilized for restoring configurations.
質問 # 11
Exhibit.
Which two statements about the output are true? (Choose two.)
- A. The latest revision history for the managed FortiGate does not match the device-level database.
- B. Configuration changes have been installed on FortiGate, which means the FortiGate configuration has been changed.
- C. Configuration changes directly made on FortiGate have been automatically updated to the device-level database.
- D. The latest revision history for the managed FortiGate does match the FortiGate running configuration.
正解：A、B
解説：
The output indicates that:
* The device's status is shown as "dev-db: modified" and "conf: in sync," which means that there is a difference between the device-level database on FortiManager and the actual running configuration of the managed FortiGate. Therefore, the latest revision history for the managed FortiGate does not match the device-level database, which confirms statement A as true.
* "dm: retrieved" status indicates that configuration changes have been installed on the FortiGate, confirming statement B as true. It also means that the configuration has been modified, and those changes have been pulled from the FortiGate to the FortiManager.
Statements C and D are incorrect because:
* C is incorrect as it implies an automatic update, whereas "dev-db: modified" indicates changes have been made on the FortiGate device that are not yet reflected in the FortiManager's database.
* D is incorrect because "dev-db: modified" shows that the device-level database and running configuration are not in sync.
FortiManager References:
* Refer to the FortiManager 7.4 Administrator Guide: Device Manager > Device Status to understand the
"dev-db" and "conf" status meanings.
質問 # 12
Refer to the exhibit. According to the error message, why is FortiManager failing to add the FortiAnalyzer device?
- A. The administrator must turn off the Use Legacy Device login and add the FortiAnalyzer device to the same network as FortiManager.
- B. The administrator must use the Add Model Device section and discover the FortiAnalyzer device.
- C. The administrator must select the FortiManager administrative access checkbox on the FortiAnalyzer management interface.
- D. The administrator must use the correct user name and password of the FortiAnalyzer device.
正解：C
質問 # 13
When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?
- A. FortiManager will revert and install a previous configuration revision on the managed FortiGate.
- B. FortiGate will reject the CLI commands that will cause the tunnel to go down.
- C. After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.
- D. FortiManager will not push the CLI commands as part of the installation that will cause the tunnel to go down.
正解：C
質問 # 14
An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the workspace mode settings be configured on FortiManager?
- A. Set to workspace and using the policy locking feature
- B. Set to read/write and using the policy locking feature
- C. Set to workflow and using the ADOM locking feature
- D. Set to normal and using the approval group feature
正解：C
質問 # 15
Which statement about the upgrade of ADOMs on FortiManager is true?
- A. You cannot import policies from a device until its FortiOS version matches the ADOM version.
- B. Upgrading the FortiManager version upgrades all existing ADOMs automatically.
- C. ADOMs using global objects can be upgraded before or after upgrading the global database ADOM.
- D. To ensure database consistency, you must upgrade an ADOM before you upgrade the devices in it.
正解：D
解説：
* Option A: To ensure database consistency, you must upgrade an ADOM before you upgrade the devices in it.This is the correct answer. When upgrading ADOMs on FortiManager, the ADOM must be upgraded first to match the FortiOS version of the devices it manages. This is necessary to ensure compatibility and consistency between the ADOM's database schema and the FortiGate's configuration.
Explanation of Incorrect Options:
* Option B: Upgrading the FortiManager version upgrades all existing ADOMs automaticallyis incorrect because the ADOMs must be upgraded manually or individually after upgrading the FortiManager.
* Option C: You cannot import policies from a device until its FortiOS version matches the ADOM versionis incorrect because while version matching is important, it is not strictly necessary for policy import.
* Option D: ADOMs using global objects can be upgraded before or after upgrading the global database ADOMis incorrect as the order of upgrade matters to maintain compatibility.
FortiManager References:
* Refer to "FortiManager Upgrade Guide" for detailed procedures on upgrading ADOMs and devices.
質問 # 16
An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.
What can prevent an admin account that has Super_User rights over the device from approving a workflow session?
- A. Trainer does not have full rights over this ADOM.
- B. Trainer must close Student's workflow session before approving the request.
- C. Trainer is not a part of workflow approval group.
- D. Trainer must first create their own workflow session to approve student session.
正解：C
解説：
An administrator must be part of an approval group, and have rights over the ADOM in which the session was created.
質問 # 17
Refer to the exhibit. Given the configuration shown in the exhibit, which two statements are true?
(Choose two.)
- A. The FortiManager ADOM is locked by the administrator.
- B. An administrator can also lock the Local-FortiGate_root policy package.
- C. FortiManager is in workflow mode.
- D. The FortiManager ADOM workspace mode is set to Normal.
正解：B、D
質問 # 18
Which configuration setting for FortiGate is part o an ADOM-level database on FortiManager?
- A. SNMP
- B. Security profiles
- C. Routing
- D. NSX-T Service Template
正解：C
解説：
* Option B: Routingis the correct answer. The ADOM-level database in FortiManager stores configuration settings such as routing, firewall policies, and objects that are shared across multiple devices in the ADOM.
Explanation of Incorrect Options:
* Option A: NSX-T Service Templateis incorrect as it is not a FortiGate-specific setting managed at the ADOM level.
* Option C: SNMPis incorrect because SNMP settings are typically managed on a per-device basis.
* Option D: Security profilesis incorrect because security profiles are generally device-level configurations, not ADOM-level.
FortiManager References:
* Refer to "FortiManager Administration Guide" for further details on ADOM-level and device-level configurations.
質問 # 19
An administrator is in the process of copying a system template profile between ADOMs by runningthe following command: executefmprofile import-profile ADOM2 3547 /tmp/myfile Where does this command import the system template profile from?
- A. ADOM2 object database
- B. FortiManager file system
- C. ADOM2 device database
- D. Source ADOM policy database
正解：B
質問 # 20
Which configurationsetting for FortiGate is part oan ADOM-level database on FortiManager?
- A. SNMP
- B. Security profiles
- C. Routing
- D. NSX-T Service Template
正解：C
質問 # 21
An administrator created a new ADOM named Training for FortiGate devices only, and added the root FortiGate device of a Security Fabric group to the Training ADOM.
Given the administrator's actions, which statement correctly describes the expected result for the downstream devices in the Security Fabric?
- A. The downstream devices are automatically authorized.
- B. The downstream devices will appear in the root ADOM.
- C. The downstream devices must be added using the Add Device wizard.
- D. The downstream devices show as unauthorized in the Training ADOM.
正解：D
解説：
All downstream fortigate in the sec fabric group will be added in unauthorized devices group in the same ADOM as the root.
質問 # 22
An administrator wants to create a policy on an ADOM that is in backup mode and install it on a FortiGate device in the same ADOM. How can the administrator perform this task?
- A. The administrator must use the Policy & Objects section to create a policy first.
- B. The administrator must use a FortiManager script.
- C. The administrator must change the ADOM mode to Advanced to bring the FortiManager online.
- D. The administrator must disable the FortiManager offline mode first.
正解：B
質問 # 23
When using the FortiManager JSON API, what is the purpose of the session ID received after successful authentication?
- A. It is used to identify the FortiManager metadata on the client.
- B. It serves as an authentication token for subsequent API requests.
- C. It contains information about the HTTP request method used.
- D. It includes a hash to check the integrity of the JSON response sent by FortiManager.
正解：B
質問 # 24
Refer to the exhibit. An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.
After the installation operation is performed, which IP/netmask will be installed on Local-FortiGate for the LOCAL_SUBNET firewall address object?
- A. It will create two firewall address objects on Local-FortiGate with 192.168.1.0/24 and 10.0.5.0/24 values.
- B. 192.168.1.0/24
- C. Local-FortiGate automatically chooses an IP/netmask based on its network interface settings.
- D. 10.0.5.0/24
正解：B
質問 # 25
Exhibit.
Given the configuration shown in the exhibit, what are two results from this configuration? {Choose two.)
- A. The same administrator can lock more than one ADOM at the same time.
- B. You can validate administrator login attempts through external servers.
- C. Concurrent read-write access to an ADOM is disabled.
- D. Two or more administrators can make configuration changes at the same time, in the same ADOM.
正解：A、C
解説：
The configuration shown in the exhibit sets theworkspace-mode to normal. The workspace mode in FortiManager defines how configuration changes and administrative tasks are handled, specifically regarding locking and collaboration in ADOMs (Administrative Domains).
Understanding the workspace modes:
* Normal Mode:In this mode, only one administrator at a time can lock and edit an ADOM. The changes made by one administrator must be completed and saved before another administrator can make changes. It prevents concurrent read-write access within the same ADOM.
* Workflow Mode:This mode allows multiple administrators to work on different tasks within the same ADOM, but changes still need to be approved before being committed.
Explanation of Options:
* A. You can validate administrator login attempts through external servers.
* This option is unrelated to the workspace mode. External authentication servers can be used for administrator logins, but that is a different configuration setting (not related to workspace-mode).
* B. The same administrator can lock more than one ADOM at the same time.
* This istrue. InNormal mode, an administrator can lock multiple ADOMs, meaning they can work on more than one ADOM simultaneously, but each ADOM can only be accessed by one administrator at a time for read-write purposes.
* C. Two or more administrators can make configuration changes at the same time, in the same ADOM.
* This isfalse. InNormal mode, onlyone administratorcan have read-write access to an ADOM at a time. If another administrator attempts to make changes, they must wait until the ADOM is unlocked by the first administrator.
* D. Concurrent read-write access to an ADOM is disabled.
* This istrue. InNormal mode, concurrent read-write access is disabled. This means only one administrator at a time can make changes to an ADOM. Other administrators can view the ADOM in read-only mode but cannot make changes until the ADOM is unlocked.
質問 # 26
If both FortiManager and FortiGate are behind NAT devices, what are the two expected results?
(Choose two.)
- A. FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.
- B. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
- C. If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
- D. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
正解：B、D
質問 # 27
Which two statements about Security Fabric integration with FortiManager are true? (Choose two.)
- A. The Security Fabric settings are part of the device-level settings.
- B. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices.
- C. The Security Fabric license, group name, and password are required for the FortiManager Security Fabric integration.
- D. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices.
正解：B、D
解説：
Two statements about Security Fabric integration with FortiManager that are true are:
* A. The Fabric View module enables you to generate the Security Fabric ratings for Security Fabric devices.
* The Fabric View module in FortiManager allows administrators to generate Security Fabric ratings, which assess the security posture of the entire Security Fabric environment.
* C. The Fabric View module enables you to view the Security Fabric ratings for Security Fabric devices.
* In addition to generating ratings, the Fabric View module provides visibility into the Security Fabric ratings for all connected devices, offering a consolidated view of security across the fabric.
Options B and D are incorrect because:
* Bis misleading as the Security Fabric settings are generally configured and managed separately from other device-level settings.
* Dis incorrect as there is no specific requirement for a Security Fabric license, group name, and password solely for FortiManager integration.
FortiManager References:
* Refer to FortiManager 7.4 Security Fabric Integration Guide: Managing Security Fabric and Generating Security Fabric Ratings.
質問 # 28
Which two conditions trigger FortiManager to create a new revision history? (Choose two.)
- A. When a configuration revision is reverted to a previous revision in the revision history
- B. When FortiManager is auto-updated with configuration changes made directly on a managed device
- C. When FortiManager installs device-level changes on a managed device
- D. When changes to the device-level database are made on FortiManager
正解：B、C
質問 # 29
......
あなたを合格させるFortinet Network Security Expert FCP_FMG_AD-7.4試験問題集で2025年04月22日には63問あります：https://www.goshiken.com/Fortinet/FCP_FMG_AD-7.4-mondaishu.html
FCP_FMG_AD-7.4無料試験学習ガイド！（更新された63問あります)：https://drive.google.com/open?id=1D-KndBW-Y9L7wDD-tWDqniBflyH7SiYc