View all questions & answers for the NSE 6 - FortiManager 7.6 Administrator Exam Materials exam
NSE 6 - FortiManager 7.6 Administrator Exam Materials - Question #16 Discussion
Community Explanations & Comments (9)
[email protected]
11 months ago
Selected: D
p141-148
When you execute a script directly on a device, the changes are
automatically applied on the device. You do not need to take any further action to apply the changes;
however, you cannot preview the changes before they are applied.
When you execute a script directly on a device, the changes are
automatically applied on the device. You do not need to take any further action to apply the changes;
however, you cannot preview the changes before they are applied.
Brave-Dumps.com Admin
11 months ago
Thank you.
Hisham Madani
7 months ago
Selected: A
In FortiGate CLI, config vpn ipsec phase1-interface and config vpn ipsec phase2-interface are separate config trees. Fortinet’s CLI reference shows phase2-interface as its own block, and a Phase 2 entry must reference the Phase 1 tunnel with set phase1name "<phase1-name>".
Fortinet examples show the proper structure as:
config vpn ipsec phase1-interface
edit ...
next
end
then a new config vpn ipsec phase2-interface block.
So if the admin starts the phase2-interface section before properly closing the phase1 block, FortiGate parses it in the wrong context and throws an error like object mismatch. That matches this question best.
Why the others are wrong:
B: IPsec templates are a different deployment method, not the fix for this CLI syntax/context error.
C: Phase 2 must be linked to Phase 1 using set phase1name; an unlinked second block is not correct.
D: The question says the script is being run Remote FortiGate Directly (via CLI), so the issue is the script structure, not the install target.
So I’d mark A.
Fortinet examples show the proper structure as:
config vpn ipsec phase1-interface
edit ...
next
end
then a new config vpn ipsec phase2-interface block.
So if the admin starts the phase2-interface section before properly closing the phase1 block, FortiGate parses it in the wrong context and throws an error like object mismatch. That matches this question best.
Why the others are wrong:
B: IPsec templates are a different deployment method, not the fix for this CLI syntax/context error.
C: Phase 2 must be linked to Phase 1 using set phase1name; an unlinked second block is not correct.
D: The question says the script is being run Remote FortiGate Directly (via CLI), so the issue is the script structure, not the install target.
So I’d mark A.
Mehdi
7 months ago
Selected: A
This causes the phase2 configuration to fail with an “object mismatch” error since it can’t properly reference its parent phase1 configuration This is structure issue not the way of deployment only option which is closest is A ,m
Anonymous User
6 months ago
Selected: D
D is the correct answer
Anonymous User
6 months ago
Selected: A
D does not resolve the script error
Anonymous User
5 months ago
Selected: D
A or D
Which one is the correct 100% ?
Which one is the correct 100% ?
Brave-Dumps.com Admin
5 months ago
A
Brave-Dumps.com Admin
5 months ago
Selected: A
I go to A
Anonymous User
2 months ago
Selected: D
FortiManager 7.6 Administrator Study Guide
Chapter: Device-Level Configuration and Installation – Advanced Use of CLI Scripts
Pages: 141–148
"When you execute a script directly on a device (Remote FortiGate Directly via CLI), the changes are automatically applied on the device. However, you cannot preview or validate objects before applying them.
Scripts containing ADOM-level objects or dynamic mappings must be run on the Policy Package or ADOM Database and then installed using the installation wizard."
(FortiManager 7.6 Administrator Study Guide, pp. 141–148)
Chapter: Device-Level Configuration and Installation – Advanced Use of CLI Scripts
Pages: 141–148
"When you execute a script directly on a device (Remote FortiGate Directly via CLI), the changes are automatically applied on the device. However, you cannot preview or validate objects before applying them.
Scripts containing ADOM-level objects or dynamic mappings must be run on the Policy Package or ADOM Database and then installed using the installation wizard."
(FortiManager 7.6 Administrator Study Guide, pp. 141–148)
Nguyễn Độ
1 month ago
Selected: A
I think A
The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error: config vpn ipsec phase2-interface [parameter(s) invalid. detail: object mismatch] What must the administrator do to resolve the script error and successfully apply the IPsec configuration? (Choose one answer)
Brave-Dump Community Votes