Fortinet FCP - FortiManager 7.6 Administrator : FCP_FMG_AD-7.6 valid dump

Refer to the exhibits.



An administrator needs to push a FortiToken Mobile to assign it to HR_user in the HQ-NGFW-1.
However, when installing the policy package, they receive the following error message:

Why is the administrator not able to install the FortiToken on the HQ-NGFW-1 firewall?

• A. The administrator must use a metadata variable to assign the same FortiToken to multiple users in FortiManager.
• B. The administrator must use per-device mapping to assign the FortiToken to HQ-NGFW-1.
• C. The administrator must use a user local meta field to assign FortiToken.
• D. The administrator must use a valid FortiToken that exists on HQ-NGFW-1.

Refer to the exhibit.

If the monitored interface for the primary FortiManager device fails, what must you do to maintain high availability (HA)?

• A. Reconfigure the primary device to remove the peer IP address of the failed device from its configuration.
• B. Check the integrity database of the primary device to force a secondary device to become the new primary with all active interfaces.
• C. The FortiManager HA failover is transparent to administrators and does not require any additional action.
• D. Manually promote one of the working secondary devices to the primary role: and reboot the original primary device to remove the peer IP address of the failed device.

After correcting a policy package configuration issue, you want to prevent administrators from repeating the mistake that caused the issue.
Which FortiManager approach best meets this need?

• A. Restrict administrators with an administration profile from viewing the revision history to limit who can make changes.
• B. Configure an TCL script to run locally on FortiManager for each FortiGate.
• C. Enable the change note to require administrators to add a note whenever they change object configurations.
• D. Enable a workflow requiring approval before installing policy packages on any FortiGate.

Refer to the exhibit.

FortiManager is operating behind a network address translation (NAT) device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings.
What is the expected result during discovery?

• A. FortiManager sets both the 100.65.0.120 IP address and 10.0.13.120 IP address on FortiGate.
• B. FortiManager sets the 100.65.0.101 IP address on FortiGate.
• C. FortiManager sets both the 100.65.0.120 IP address and 100.65.0.101 IP address on FortiGate.
• D. FortiManager sets the 100.65.0.120 IP address on FortiGate.

An administrator assigned the Training global policy package to the Branches policy package in ADOM1.
Later, the administrator created a new policy package named Remotes on ADOM1.
What should the administrator do to sync the Training global policy package with the Remotes policy package in ADOM1?

• A. Assign the Training global policy package to the Remotes policy package
• B. Unassign the Training policy package and reassign it to all policy packages within ADOM1
• C. Use the automatically install policies to ADOM devices method to sync from the Training global policy package to the Remotes policy package
• D. Manually add and assign the Remotes policy package to the Training global policy package