FCP_FMG_AD-7.4 - FCP - FortiManager 7.4 Administrator

FortiManager backups include:

A. All devices— This includes all device configurations managed by FortiManager, such as firewall policies, objects, and other settings.

D. Flash configuration— This consists of local FortiManager configurations stored in flash memory, such as system settings, scripts, and other locally-stored configurations.

Options B and C are incorrect because:

B (Firmware images)are not typically included in a FortiManager backup. Firmware images are usually stored separately and managed through a different process.

C (FortiGuard database)is incorrect as the FortiGuard database, which contains threat intelligence and security signatures, is not part of the standard FortiManager backup.

FortiManager References:

Refer to FortiManager 7.4 Administrator Guide: Backup and Restore Processes.

When deciding to use FortiManager to manage a FortiAnalyzer device, you must ensure certain conditions are met so that the integration works seamlessly. One key aspect to consider is whether the necessary FortiAnalyzer features are enabled on FortiManager.

Explanation of Options:

A. Confirm that FortiManager has enough storage capacity for the expected logs.

This isfalse. FortiManager is not primarily responsible for storing logs. Logs are stored on the FortiAnalyzer device, and FortiManager’s role is more focused on managing configuration, policies, and pushing updates, not on handling large volumes of logs.

B. Ensure that FortiAnalyzer features are installed in advance.

This istrue. Before using FortiManager to manage a FortiAnalyzer device, you must ensure that the necessaryFortiAnalyzer featuresare properly installed and enabled on FortiManager. FortiAnalyzer’s reporting and logging functions must be correctly integrated for FortiManager to manage it effectively.

C. Check whether FortiManager is part of a high availability (HA) cluster.

This isfalse. While HA is important for redundancy, it is not a prerequisite for managing FortiAnalyzer with FortiManager. The HA status of FortiManager does not directly affect its ability to manage a FortiAnalyzer device.

D. Determine whether the VDOMs of the same FortiGate will be assigned to different ADOMs.

This isfalse. VDOMs (Virtual Domains) and ADOMs (Administrative Domains) relate to the management of FortiGate devices and the segregation of administrative access within FortiManager. This is unrelated to the management of a FortiAnalyzer device.

Option A: To ensure database consistency, you must upgrade an ADOM before you upgrade the devices in it.This is the correct answer. When upgrading ADOMs on FortiManager, the ADOM must be upgraded first to match the FortiOS version of the devices it manages. This is necessary to ensure compatibility and consistency between the ADOM's database schema and the FortiGate's configuration.

Explanation of Incorrect Options:

Option B: Upgrading the FortiManager version upgrades all existing ADOMs automaticallyis incorrect because the ADOMs must be upgraded manually or individually after upgrading the FortiManager.

Option C: You cannot import policies from a device until its FortiOS version matches the ADOM versionis incorrect because while version matching is important, it is not strictly necessary for policy import.

Option D: ADOMs using global objects can be upgraded before or after upgrading the global database ADOMis incorrect as the order of upgrade matters to maintain compatibility.

FortiManager References:

Refer to "FortiManager Upgrade Guide" for detailed procedures on upgrading ADOMs and devices.