Push updates are failing on a FortiGate device located behind a network address translation (NAT) device? Which two settings should the administrator check to correct this problem? (Choose two.)

1. A. Make sure the NAT device IP address and the correct ports are configured on FortiManager.
2. B. Make sure FortiGuard updates and web service are enabled on the FortiGuard service interface.
3. C. Make sure the virtual IP address and the correct ports are configured on the NAT device.
4. D. Make sure the Bind to IP address option on the FortiGuard service interface is set to the virtual IP address from the NAT device.

Correct Answer: AC
FortiManager must have the NAT device's IP address and correct ports configured to communicate properly with the FortiGate behind NAT.
The NAT device must have the correct virtual IP address and ports configured to allow push updates to reach the FortiGate device.

Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

1. A. When FortiManager installs device-level changes on a managed device
2. B. When changes to the device-level database are made on FortiManager
3. C. When FortiManager is auto-updated with configuration changes made directly on a managed device
4. D. When a provisioning template is assigned to a managed device on the device-level database

Correct Answer: BC
FortiManager creates a new revision history entry whenever changes are made to the device-level database on FortiManager.
FortiManager also creates a new revision when it auto-updates its database with configuration changes detected directly on a managed device.

Refer to the exhibits.


An administrator runs the reload failure commanddiagnose test deploymanager reloadconf 262on FortiManager.
Why does the administrator receive an error message?

1. A. The administrator must use the FortiGate name instead of the ID number.
2. B. The administrator just recently added FortiGate HQ-NGFW as a model device.
3. C. FortiManager requires the FortiGate serial number instead of the ID number.
4. D. FortiManager does not support FortiOS version 7.0.

Correct Answer: B
The error occurs because the FortiGate HQ-NGFW device with ID 262 is a newly added model device and has not yet been fully synchronized or installed with a configuration package, which causes the reload configuration command to fail.

An administrator has a FortiGate-HQ device with VDOMs—root, HR and Facilities, currently managed under the FortiManager ADOM—Site1. They try to move VDOM HR to the FortiManager ADOM—Site2, but it does not work.
Why is the administrator not able to move FortiGate-HQ VDOM HR to FortiManager ADOM—Site2?

1. A. The FortiGate-HQ must be managed under the FortiManager ADOM—root to allow moving its VDOMs to different ADOMs.
2. B. The administrator must have full access in the device layer of FortiGate-HQ VDOM-root before they can VDOMs to different ADOMs.
3. C. FortiManager must be in ADOM normal mode, which does not allow VDOMs to be managed separately.
4. D. The administrator must delete the FortiGate-HQ device from FortiManager and add it again using the Add Device wizard before moving the VDOM.

Correct Answer: A
FortiGate devices must be managed under the FortiManager ADOM corresponding to the root VDOM to allow their individual VDOMs to be moved and managed in different ADOMs. Managing the root VDOM in a different ADOM prevents moving subordinate VDOMs across ADOMs.

Which output is displayed right after moving the ISFW device from one ADOM to another?
A)

B)

C)

D)

1. A. Option A
2. B. Option B
3. C. Option C
4. D. Option D

Correct Answer: C
Right after moving the ISFW device to a new ADOM, the status typically shows the policy package as never-installed, indicating that the device has been assigned to the new ADOM but no policy package has yet been installed in that ADOM.