Refer to the exhibits.

An administrator needed to recover all the configurations related to the user, Support. The configurations were saved in configuration revision ID 9.
The administrator reverted the configuration using theConfiguration Revision Historywindow and received the CLI output shown in the exhibit.
What can you conclude from the CLI output?

1. A. The administrator set the flag to 0 to prevent configuration overrides.
2. B. The administrator reinstalled the policy package.
3. C. The administrator needs to retrieve the device to correctly detect the FortiGate firmware version.
4. D. The administrator installed only the device-level configuration.

Correct Answer: C
The CLI output shows the status "dev-db: not modified; conf: in sync; cond: OK; dm: installed," but the firmware version for the device is listed as "[unknown]." This indicates that FortiManager has not properly detected the FortiGate firmware version, likely because the device needs to be retrieved to update its information.

Which is recommended when you are managing a high volume of logs in your network?

1. A. Store logs on FortiManager and use FortiView.
2. B. Add and manage FortiAnalyzer from FortiManager.
3. C. Enable advanced ADOM mode on FortiManager.
4. D. Forward logs from FortiAnalyzer to FortiManager daily.

Correct Answer: B
Adding and managing FortiAnalyzer from FortiManager is recommended for handling a high volume of logs, as FortiAnalyzer is designed specifically for centralized log management, analysis, and reporting, which offloads this workload from FortiManager.

The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error:
config vpn ipsec phase2-interface [parameter(s) invalid. detail: object mismatch]
What must the administrator do to resolve the script error and successfully apply the IPsec configuration?

1. A. Add the end command after finishing the IPsec phase 1-interface configuration block.
2. B. Use IPsec templates to deploy provisioning templates.
3. C. Add a second config vpn ipsec phase2-interface block without linking it to phase1.
4. D. Run the script using the policy package or ADOM database method.

Correct Answer: D
Running the script through the policy package or ADOM database method allows FortiManager to properly interpret object relationships and dependencies in the IPsec configuration, preventing object mismatch errors when pushing complex VPN settings directly via CLI.

Refer to the exhibit.

What are two results from the configuration shown in the exhibit? (Choose two.)

1. A. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.
2. B. The administrator can lock policy blocks and FortiManager global ADOM.
3. C. The same administrator can lock more than one ADOM at the same time.
4. D. The administrator must have access to the ADOM to approve changes.

Correct Answer: AB
In normal workspace mode, ungraceful session closures will keep the ADOM locked until the session times out, preventing other administrators from editing.
Normal workspace mode allows administrators to lock policy blocks and the global ADOM, providing granular locking control.

An administrator configures a new BGP peer in the FortiManager device-level database of FortiGate. They reinstall the policy package to the managed FortiGate device without any errors. However, when the administrator logs in to FortiGate, they do not see the BGP configuration changes.
What is the most likely reason why FortiManager did not push the BGP peer changes to FortiGate?

1. A. The administrator must run a sanity check on FortiManager to make sure the database is not corrupted.
2. B. Fortigate has a BGP template assigned on the FortiManager database.
3. C. The administrator must use the Install Wizard and select Install device settings only to push BGP settings
4. D. The FortiGate firmware version is different from the FortiManager ADOM version.

Correct Answer: B
If a BGP template is assigned to the FortiGate device on FortiManager, device-level BGP configurations made directly in the device-level database are overridden by the template settings, so the changes do not get pushed to the device.