nerdexam
Fortinet

FCP_FGT_AD-7.4 · Question #88

FCP_FGT_AD-7.4 Question #88: Real Exam Question with Answer & Explanation

The correct answer is A. Change the csf setting on Local-FortiGate (root) to sec fabric-object-unification default.. The current setting for the root FortiGate (Local-FortiGate) is fabric-object-unification local, which means that new address objects are not shared across the security fabric. Changing this setting to fabric-object-unification default will allow address objects to be synchronize

Question

Refer to the exhibits. An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW). What must the administrator do to synchronize the address object?

Exhibits

FCP_FGT_AD-7.4 question #88 exhibit 1
FCP_FGT_AD-7.4 question #88 exhibit 2

Options

  • AChange the csf setting on Local-FortiGate (root) to sec fabric-object-unification default.
  • BChange the csf setting on both devices to sec downscream-access enable.
  • CChange the csf setting on ISFW (downstream) to sec auchorizacion-requesc-cype certificace.
  • DChange the csf setting on ISFW (downstream) to sec configuration-sync local.

Explanation

The current setting for the root FortiGate (Local-FortiGate) is fabric-object-unification local, which means that new address objects are not shared across the security fabric. Changing this setting to fabric-object-unification default will allow address objects to be synchronized and shared with downstream devices like the ISFW.

Community Discussion

No community discussion yet for this question.

Full FCP_FGT_AD-7.4 Practice