[Mar 10, 2026] FCP_FMG_AD-7.4 certification guide Q&A from Training Expert ActualCollection [Q28-Q50]

NO.28 An administrator enabled workspace mode and now wants to delete an address object that is currently referenced in a firewall policy. Which two results can the administrator expect? (Choose two.)

FortiManager will temporarily change the status of the referenced firewall policy to disabled.

FortiManager will disable the status of the address object until the changes are installed.

FortiManager will not allow the administrator to delete a referenced address object until theylockthe ADOM.

FortiManager will replace the deleted address object with the none address object in the referenced firewall policy.

NO.29 Which two items does an FGFM keepalive message include? (Choose two.)

FortiGate IPS version

FortiGate license information

FortiGate configuration checksum

FortiGate uptime

NO.30 Refer to the exhibit.

What will happen if the script is run using theRemote FortiGate Directly (via CLI)option? (Choose two.)

FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

FortiManager will create a new revision history.

FortiGate will auto-update the FortiManager device-level database.

You must install these changes using the Install Wizard.

NO.31 Refer to the exhibit. How will FortiManager try to get updates tor antivirus and IPS?

From the list of configured override servers or public FDN servers

From the configured override server IP address 10.0.1.50 only

From the default server fds1.fortinet.com

From public FDNI server IP address with the fourth highest octet only

NO.32 An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.
How should the workspace mode settings be configured on FortiManager?

Set to workspace and using the policy locking feature

Set to read/write and using the policy locking feature

Set to workflow and using the ADOM locking feature

Set to normal and using the approval group feature

NO.33 Which two statements about scheduled backups on FortiManager are true? (Choose two.)

They back up all devices and the FortiGuard database.

They can be configured using the CLI and the GUI.

They put FortiManager in offline mode.

They support FTP, SCP, and SFTP.

NO.34 An administrator wants to create a policy on an ADOM that is in backup mode and install it on a FortiGate device in the same ADOM. How can the administrator perform this task?

The administrator must use the Policy & Objects section to create a policy first.

The administrator must use a FortiManager script.

The administrator must disable the FortiManager offline mode first.

The administrator must change the ADOM mode to Advanced to bring the FortiManager online.

NO.35 Refer to the exhibit. Given the configuration shown in the exhibit, which two conclusions can you draw from the installation targets in the Install On column? (Choose two.)

Policy seq.S will be installed on all managed devices and VDOMs that are listed under Installation Targets

Policy seq.# 3 will be skipped because no installation targets are specified.

Policy seq.# 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target

Policy seq.# 1 will be installed on the ISFW device root[NAT] and Student[NAT] VDOMs only.

NO.36 What must you consider before deciding to use FortiManager to manage a FortiAnalyzer device?

Confirm that FortiManager has enough storage capacity for the expected logs.

Ensure that FortiAnalyzer features are installed in advance.

Check whether FortiManager is part of a high availability (HA) cluster.

Determine whether the VDOMs of the same FortiGate will be assigned to different ADOMs.

NO.37 When using the FortiManager JSON API, what is the purpose of the session ID received after successful authentication?

It is used to identify the FortiManager metadata on the client.

It includes a hash to check the integrity of the JSON response sent by FortiManager.

It contains information about the HTTP request method used.

It serves as an authentication token for subsequent API requests.

NO.38 Refer to the exhibit.

Given the configuration shown in the exhibit, what are two results from this configuration? (Choose two.)

Unlocking an ADOM will submit configuration changes automatically to the approval administrator.

Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.

Unlocking an ADOM will install configuration changes automatically on managed devices.

The same administrator can lock more than one ADOM at the same time.

NO.39 Refer to the exhibit.

What can you conclude from the failed installation log shown in the exhibit?

Policy ID 2 is installed in the disabled state.

Policy ID 2 is installed without the remote user student.

Policy ID 2 will not be installed.

Policy ID 2 is installed without a source address.

NO.40 Refer to the exhibit. A junior administrator is troubleshooting a FortiManager connectivity issue that is occurring with a managed FortiGate device.
Given the FortiManager device manager settings shown in the exhibit, what can you conclude from this scenario?

The administrator must refresh the device to restore connectivity.

FortiManager lost internet connectivity, therefore, the device appears to be down.

The administrator can reclaim the FortiGate to FortiManager protocol (FGFM) tunnel to get the device online.

The administrator recently restored a FortiManager configuration file.

NO.41 An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.
What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

Trainer is not a part of workflow approval group.

Trainer must close Student’s workflow session before approving the request.

Trainer must first create their own workflow session to approve student session.

Trainer does not have full rights over this ADOM.

NO.42 Refer to the exhibit.

Given the configuration shown in the exhibit, which two conclusions can you draw from the installation targets in the Install On column? (Choose two.)

Policy seq.S will be installed on all managed devices and VDOMs that are listed under Installation Targets

Policy seq.# 3 will be skipped because no installation targets are specified.

Policy seq.# 2 will not be installed on the Local-FortiGate root VDOM because there is no root VDOM in the Installation Target

Policy seq.# 1 will be installed on the ISFW device root[NAT] and Student[NAT] VDOMs only.

NO.43 Refer to the exhibit. Which statement about the environment shown in the exhibit is correct?

You must restart the secondary unit if you promote it to become the primary.

A failover will take place after five minutes without receiving heartbeat packets.

FortiAnalyzer features are not enabled on this FortiManager device.

No FortiGuard packages have been synchronized between the cluster members yet.

NO.44 If both FortiManager and FortiGate are behind NAT devices, what are the two expected results?
(Choose two.)

FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.

If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.

During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

NO.45 Refer to the exhibit. What will happen if the script is run using the Remote FortiGate Directly (via CLI) option? (Choose two.)

FortiManager provides a preview of CLI commands before executing this script on a managed FortiGate.

FortiManager will create a new revision history.

FortiGate will auto-update the FortiManager device-level database.

You must install these changes using the Install Wizard.

NO.46 An administrator is in the process of copying a system template profile between ADOMs by runningthe following command: executefmprofile import-profile ADOM2 3547 /tmp/myfile Where does this command import the system template profile from?

FortiManager file system

ADOM2 object database

ADOM2 device database

Source ADOM policy database

NO.47 When an installation is performed from FortiManager, what is the recovery logic used between FortiManager and FortiGate for an FGFM tunnel?

FortiManager will not push the CLI commands as part of the installation that will cause the tunnel to go down.

After 15 minutes, FortiGate will unset all CLI commands that were part of the installation that caused the tunnel to go down.

FortiManager will revert and install a previous configuration revision on the managed FortiGate.

FortiGate will reject the CLI commands that will cause the tunnel to go down.

NO.48 What must you consider before deciding to use FortiManager to manage a FortiAnalyzer device?