最新のNSE6_FMG_AD-7.6問題集で試験を準備する

An administrator is copying a system template profile between ADOMs by running the following command:
execute fmprofile export-profile ADOM 3547 /tmp/Backup_File
output dump to file: [/tmp/Backup_File]
Where does this command export the system template profile from?

• A. ADOM device database
• B. FortiManager /tmp/Backup_File folder
• C. FortiManager configuration backup file
• D. FortiManager ADOM policy database

The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error:
config vpn ipsec phase2-interface [parameter(s) invalid. detail: object mismatch] What must the administrator do to resolve the script error and successfully apply the IPsec configuration?

• A. Run the script using the policy package or ADOM database method.
• B. Add the end command after finishing the IPsec phase 1-interface configuration block.
• C. Use IPsec templates to deploy provisioning templates.
• D. Add a second config vpn ipsec phase2-interface block without linking it to phase1.

Refer to the exhibit.

An administrator assigned a new policy package to FortiGate HQ-NGFW-1. In the installation preview, they noticed some settings they did not modify and are unsure about the changes.
Based on the exhibit, which two things will happen if they continue with the installation? (Choose two.)

• A. FortiGate HQ-NGFW-1 can contact the FortiManager acting as FortiGuard Distribution Server (FDS) to download FortiGuard updates.
• B. FortiGate HQ-NGFW-1 can use FortiManager firmware templates to upgrade firmware and ratings.
• C. FortiManager will install the CA certificate named root_CA3 to authenticate FortiGate-to-FortiManager communication protocol (FGFM) tunnel connections with FortiGate HQ- NGFW-1.
• D. FortiGate HQ-NGFW-1 will use the root_CA3 certificate in firewall address objects or policies.

A FortiManager administrator opens the revision history and choose to revert to a previous version.
What will this action do to the current device configuration?

• A. It will trigger a conflict status if it is using any provisioning template, and the administrator will have to install changes.
• B. It will revert both configurations: device-level database and policy layer database.
• C. It will modify the device-level database.
• D. It will trigger an unknown device-level database status, and the administrator will have to import a policy package to sync.

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM.
How can the customer administrator edit the global header policy of the global policy package?

• A. The customer administrator can edit the header policy by using workspace mode on the global ADOM.
• B. The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.
• C. The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.
• D. The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.