An administrator suspects that the Collector Agent is not forwarding login events to FortiGate.
What is the most effective troubleshooting step?

• A.Verify if DC agent is enabled on the FortiGate.
• B.Restart the domain controller to refresh authentication services.
• C.Verify if FortiGate is set to use LDAP authentication instead of FSSO.
• D.Check if TCP port 8000 is open between the collector agent and FortiGate.

Comment: *

Name: *

Email: *

Verification: *

An administrator configures a new BGP peer in the FortiManager device-level database of FortiGate. They reinstall the policy package to the managed FortiGate device without any errors. However, when the administrator logs in to FortiGate, they do not see the BGP configuration changes.
What is the most likely reason why FortiManager did not push the BGP peer changes to FortiGate?

• A.The administrator must run a sanity check on FortiManager to make sure the database is not corrupted.
• B.Fortigate has a BGP template assigned on the FortiManager database.
• C.The administrator must use the Install Wizard and select Install device settings only to push BGP settings
• D.The FortiGate firmware version is different from the FortiManager ADOM version.

Comment: *

Name: *

Email: *

Verification: *

What are two outcomes of ADOM revisions? Choose two answers.

• A.ADOM revisions can save the current state of the entire ADOM.
• B.ADOM revisions do not increase the size of configuration backups.
• C.ADOM revisions can save the current state of all policy packages and objects for an ADOM.
• D.ADOM revisions appear in the Install Policy and Package Settings section of the install wizard.

Comment: *

Name: *

Email: *

Verification: *

The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error:
config vpn ipsec phase2-interface [parameter(s) invalid. detail: object mismatch] What must the administrator do to resolve the script error and successfully apply the IPsec configuration?

• A.Add the end command after finishing the IPsec phase 1-interface configuration block.
• B.Use IPsec templates to deploy provisioning templates.
• C.Add a second config vpn ipsec phase2-interface block without linking it to phase1.
• D.Run the script using the policy package or ADOM database method.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

An administrator assigned a new policy package to FortiGate HQ-NGFW-1. In the installation preview, they noticed some settings they did not modify and are unsure about the changes.
Based on the exhibit, which two things will happen if they continue with the installation? (Choose two.)

• A.FortiGate HQ-NGFW-1 can use FortiManager firmware templates to upgrade firmware and ratings.
• B.FortiGate HQ-NGFW-1 can contact the FortiManager acting as FortiGuard Distribution Server (FDS) to download FortiGuard updates.
• C.FortiGate HQ-NGFW-1 will use the root_CA3 certificate in firewall address objects or policies.
• D.FortiManager will install the CA certificate named root_CA3 to authenticate FortiGate-to-FortiManager communication protocol (FGFM) tunnel connections with FortiGate HQ- NGFW-1.

Comment: *

Name: *

Email: *

Verification: *