Which two statements about the output are true?

Refer to the exhibit.

Which two statements about the output are true? (Choose two.)
A . The latest revision history for the managed FortiGate does match with the FortiGate running configuration
B . Configuration changes have been installed to FortiGate and represents FortiGate configuration has been changed
C . The latest history for the managed FortiGate does not match with the device-level database
D . Configuration changes directly made on the FortiGate have been automatically updated to device-level database

View Answer

Answer: A,C

Explanation:

STATUS: dev-db: modified; conf: in sync; cond: pending; dm: retrieved; conn: up

C dev-db: modified C This is the device setting status which indicates that configuration changes were made on FortiManager.

C conf: in sync C This is the sync status which shows that the latest revision history is in sync with Fortigate’s configuration.

C cond: pending C This is the configuration status which says that configuration changes need to be installed.

Most probably a retrieve was done in the past (dm: retrieved) updating the revision history DB (conf: in sync) and FortiManager device level DB, now there is a new modification on FortiManager device level DB (dev-db: modified) which wasn’t installed to FortiGate (cond: pending), hence; revision history DB is not aware of that modification and doesn’t match device DB.

Conclusion:

C Revision DB does match FortiGate.

C No changes were installed to FortiGate yet.

C Device DB doesn’t match Revision DB.

C No changes were done on FortiGate (auto-update) but configuration was retrieved instead

After an Auto-Update or Retrieve:

device database = latest revision = FGT

Then after a manual change on FMG end (but no install yet):

latest revision = FGT (still) but now device database has been modified (is different).

After reverting to a previous revision in revision history:

device database = reverted revision != FGT