Fortinet FCP_FMG_AD-7.6 Practice Test Pdf Exam Material [Q22-Q41]

Rate this post

Fortinet FCP_FMG_AD-7.6 Practice Test Pdf Exam Material

FCP_FMG_AD-7.6 Answers FCP_FMG_AD-7.6 Free Demo Are Based On The Real Exam

Fortinet FCP_FMG_AD-7.6 Exam Syllabus Topics:

Section	Objectives
Topic 1: Device Manager	– Object management – Device configuration and installation – Adding and managing devices – Policy package management
Topic 2: Advanced Configuration	– High Availability – Workspace modes – FortiManager troubleshooting
Topic 3: Policy and Objects	– Central management – Object configuration – Policy package creation and installation
Topic 4: System Configuration	– FortiManager system configuration – Network configuration – System settings

NEW QUESTION 22
Which two items does an FGFM keepalive message include? (Choose two.)

FortiGate IPS version

FortiGate license information

FortiGate configuration checksum

FortiGate uptime

NEW QUESTION 23
You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?

The shared policy package will not be moved to the new ADOM automatically.

The shared device settings will be installed automatically.

Policy packages will be imported into the new ADOM automatically.

Any unused objects from a previous ADOM are moved to the new ADOM automatically.

NEW QUESTION 24
Refer to the exhibit.

FortiManager is operating behind a network address translation (NAT) device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings.
What is the expected result during discovery?

FortiManager sets both the 100.65.0.120 IP address and 10.0.13.120 IP address on FortiGate.

FortiManager sets both the 100.65.0.120 IP address and 100.65.0.101 IP address on FortiGate.

FortiManager sets the 100.65.0.101 IP address on FortiGate.

FortiManager sets the 100.65.0.120 IP address on FortiGate.

NEW QUESTION 25
A FortiManager administrator has moved a FortiGate device to a new ADOM, but they cannot see the policy or object configurations for that FortiGate.
What should the administrator do to see the policy or object configurations?

Use ADOM shared objects to restore all missing data.

Reset the device and add it to the new ADOM again.

Import the policy package manually using the Import Configuration wizard.

Use ADOM sync to restore the missing configurations.

NEW QUESTION 26
An administrator configures a new BGP peer in the FortiManager device-level database of FortiGate. They reinstall the policy package to the managed FortiGate device without any errors. However, when the administrator logs in to FortiGate, they do not see the BGP configuration changes.
What is the most likely reason why FortiManager did not push the BGP peer changes to FortiGate?

The administrator must run a sanity check on FortiManager to make sure the database is not corrupted.

Fortigate has a BGP template assigned on the FortiManager database.

The administrator must use the Install Wizard and select Install device settings only to push BGP settings

The FortiGate firmware version is different from the FortiManager ADOM version.

NEW QUESTION 27
Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

When FortiManager installs device-level changes on a managed device

When changes to the device-level database are made on FortiManager

When FortiManager is auto-updated with configuration changes made directly on a managed device

When a provisioning template is assigned to a managed device on the device-level database

NEW QUESTION 28
Refer to the exhibit. If the monitored interface for the primary FortiManager device fails, what must you do to maintain high availability (HA)?

The FortiManager HA failover is transparent to administrators and does not require any additional action.

Manually promote one of the working secondary devices to the primary role: and reboot the original primary device to remove the peer IP address of the failed device.

Reconfigure the primary device to remove the peer IP address of the failed device from its configuration.

Check the integrity database of the primary device to force a secondary device to become the new primary with all active interfaces.

NEW QUESTION 29
Which output is displayed right after moving the ISFW device from one ADOM to another?

NEW QUESTION 30
An administrator configures a new BGP peer in the FortiManager device-level database of FortiGate. They reinstall the policy package to the managed FortiGate device without any errors.
However, when the administrator logs in to FortiGate, they do not see the BGP configuration changes. What is the most likely reason why FortiManager did not push the BGP peer changes to FortiGate?

The administrator must run a sanity check on FortiManager to make sure the database is not corrupted.

Fortigate has a BGP template assigned on the FortiManager database.

The administrator must use the Install Wizard and select Install device settings only to push BGP settings

The FortiGate firmware version is different from the FortiManager ADOM version.

NEW QUESTION 31
An administrator wants to configure and manage multiple objects in the FortiManager database and give access to other users who work in the same database. To stay in control of the changes made to firewall policies by other team members, the administrator needs a setup where all modifications go through a central check before they can be installed.
How can the administrator create this setup?

Enable the prompt asking the administrator to accept firewall policies changes before saving.

Enable the workspace (for all ADOMs) to control all changes made by any administrator.

Enable device lock and the advanced mode feature in the ADOM.

Enable workflow mode and the ADOM lock feature.

NEW QUESTION 32
An administrator is copying a system template profile between ADOMs by running the following command:
execute fmprofile export-profile ADOM 3547 /tmp/Backup_File
output dump to file: [/tmp/Backup_File]
Where does this command export the system template profile from?

FortiManager /tmp/Backup_File folder

FortiManager ADOM policy database

ADOM device database

FortiManager configuration backup file

NEW QUESTION 33
Refer to the exhibit.

What are two results from the configuration shown in the exhibit? Choose two answers.

The same administrator can lock more than one ADOM at the same time.

Multiple administrators can lock and work on separate ADOMs at the same time.

All changes must be approved before they can be installed on a device.

Concurrent read-write access to an ADOM is disabled.

NEW QUESTION 34
Refer to the exhibit. Which two statements about the configuration shown in the exhibit are true?
(Choose two.)

An administrator can lock the Local-FortiGate_root policy package.

The administrator created a snapshot of the Remote-FortiGate policy package.

The FortiManager ADOM workspace mode is set to normal.

The FortiManager is in workflow mode.

NEW QUESTION 35
Refer to the exhibits.

Which IP/netmask will be present in the LAN firewall address object on the Remote-Firewall?

172.16.0.0/255.255.255.0

10.0.0.0/255.255.255.0

192.168.1.0/255.255.255.0

172.16.10.0/255.255.255.0

NEW QUESTION 36
Refer to the exhibit.

Which two results occur if you run the script using theDevice Databaseoption? (Choose two.)

The device Config Status is tagged as Modified.

The script history shows the successful installation of the script on the remote FortiGate.

The successful execution of a script on the Device Database creates a new revision history.

The administrator must install these changes on a managed device using the Install Wizard.

NEW QUESTION 37
Refer to the exhibits. What can you conclude, based on the configuration shown in the exhibit?

Policy sequence #1 will be installed on the internal segmentation firewall (ISFW) device root
[NAT] and Trainer [NAT] VDOMs.

Policy sequence #3 must have devices or VDOMs listed in the Install On column; otherwise, it will cause errors.

The global policy package will be added to the top of the ISFW policy package.

The administrator needs to retrieve the Local-FortiGate configuration to sync with the Security Fabric group, Training.

NEW QUESTION 38
You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?

The shared device settings will be installed automatically.

The shared policy package will not be moved to the new ADOM automatically.

Any unused objects from a previous ADOM are moved to the new ADOM automatically.

Policy packages will be imported into the new ADOM automatically.

NEW QUESTION 39
The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error:
config vpn ipsec phase2-interface [parameter(s) invalid. detail: object mismatch] What must the administrator do to resolve the script error and successfully apply the IPsec configuration?

Add the end command after finishing the IPsec phase 1-interface configuration block.

Use IPsec templates to deploy provisioning templates.

Add a second config vpn ipsec phase2-interface block without linking it to phase1.

Run the script using the policy package or ADOM database method.

NEW QUESTION 40
An administrator assigned the Training global policy package to the Branches policy package in ADOM1. Later, the administrator created a new policy package named Remotes on ADOM1.
What should the administrator do to sync the Training global policy package with the Remotes policy package in ADOM1?

Manually add and assign the Remotes policy package to the Training global policy package

Use the automatically install policies to ADOM devices method to sync from the Training global policy package to the Remotes policy package

Assign the Training global policy package to the Remotes policy package

Unassign the Training policy package and reassign it to all policy packages within ADOM1

NEW QUESTION 41
Refer to the exhibits.

An administrator needs to push a FortiToken Mobile to assign it to HR_user in the HQ-NGFW-1.
However, when installing the policy package, they receive the following error message:

Why is the administratornotable to install the FortiToken on the HQ-NGFW-1 firewall?