FCP_FMG_AD-7.6 Dumps Questions – Effective Way to Get Certified

If you're in the field of Fortinet, you know how important it is to stay up-to-date with the latest knowledge and skills to protect your organization's networks and data. One way to do that is by obtaining FCP in Network Security, specifically the FCP_FMG_AD-7.6 exam. While preparing for the FCP_FMG_AD-7.6 exam, you might consider using FCP_FMG_AD-7.6 dumps to help you familiarize yourself with the exam format and content. These FCP_FMG_AD-7.6 exam dumps questions can be an effective way to gauge your knowledge and identify areas where you may need additional study. Study online free FCP_FMG_AD-7.6 exam dumps below.

Page 1 of 1

1. Refer to the exhibit.





An administrator created two new meta fields in FortiManager.

Which operation can you perform with these parameters?

You can add them to objects as custom attributes.

You can export them to be used in other ADOMs.

You can use them as variables in scripts.

You can invoke them using the $ character.

 Loading...

2. An administrator is copying a system template profile between ADOMs by running the following command:

execute fmprofile export-profile ADOM 3547 /tmp/Backup_File output dump to file: [/tmp/Backup_File]

Where does this command export the system template profile from?

FortiManager /tmp/Backup_File folder

FortiManager ADOM policy database

ADOM device database

FortiManager configuration backup file

 Loading...

3. A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM.

How can the customer administrator edit the global header policy of the global policy package?

The customer administrator can edit the header policy by using workspace mode on the global ADO

The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADO

The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.

The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADO

 Loading...

4. Company policy dictates that any time a change is made to a policy package on FortiManager an ADOM revision is created before the change installed, and that revision is held for a minimum of 90 days.

Over the past three months, each installed change has resulted in several unused policies and duplicate objects.

The FortiManager administrator plans to upgrade the FortiGate devices and then upgrade the FortiManager ADOM from version 7.4 to 7.6.

Which action can the administrator take to avoid slow ADOM upgrades?

Check and repair the global configuration database before upgrading.

Export firewall policies to Excel, delete them on the ADO

then reimport them after upgrading the ADO

Find unused firmware templates, then delete them before upgrading.

Limit ADOM revisions before upgrading.

 Loading...

5. Refer to the exhibit.





Which two statements about the output are true? (Choose two.)

The latest revision history for the managed FortiGate does not match the device-level database.

Configuration changes have been installed on FortiGate, updating policy and device-level database.

The latest revision history for the managed FortiGate does match the FortiManager policy database.

The system template default will override device-level database configurations.

 Loading...

6. Push updates are failing on a FortiGate device located behind a network address translation (NAT) device?

Which two settings should the administrator check to correct this problem? (Choose two.)

Make sure the NAT device IP address and the correct ports are configured on FortiManager.

Make sure FortiGuard updates and web service are enabled on the FortiGuard service interface.

Make sure the virtual IP address and the correct ports are configured on the NAT device.

Make sure the Bind to IP address option on the FortiGuard service interface is set to the virtual IP address from the NAT device.

 Loading...

7. Refer to the exhibit.





An administrator assigned a new policy package to FortiGate HQ-NGFW-1. In the installation preview, they noticed some settings they did not modify and are unsure about the changes.

Based on the exhibit, which two things will happen if they continue with the installation? (Choose two.)

FortiGate HQ-NGFW-1 can use FortiManager firmware templates to upgrade firmware and ratings.

FortiGate HQ-NGFW-1 can contact the FortiManager acting as FortiGuard Distribution Server (FDS) to download FortiGuard updates.

FortiGate HQ-NGFW-1 will use the root_CA3 certificate in firewall address objects or policies.

FortiManager will install the CA certificate named root_CA3 to authenticate FortiGate-to-FortiManager communication protocol (FGFM) tunnel connections with FortiGate HQ- NGFW-1.

 Loading...

8. Refer to the exhibits.









An administrator needed to recover all the configurations related to the user, Support. The configurations were saved in configuration revision ID 9.

The administrator reverted the configuration using the Configuration Revision History window and received the CLI output shown in the exhibit.

What can you conclude from the CLI output?

The administrator set the flag to 0 to prevent configuration overrides.

The administrator reinstalled the policy package.

The administrator needs to retrieve the device to correctly detect the FortiGate firmware version.

The administrator installed only the device-level configuration.

 Loading...

9. Refer to the exhibits.













FortiGate HQ-NGFW-1 downloads and validates FortiGuard databases from FortiManager which acts as a local FortiGuard Distribution Server (FDS) in a closed network. An administrator pushes a new firewall policy with an intrusion prevention system (IPS) profile from FortiManager to FortiGate HQ-NGFW-1 However, FortiGate does not recognize the new IPS signature from FortiManager.

What is the most likely reason why FortiGate HQ-NGFW-1 does not recognize the new IPS signature?

FortiGate must enable rating for the FortiManager IP address, 192.168.1.120, in server list 1.

FortiManager and FortiGate have different IPS database versions.

The administrator must enable IPv6 connections for FortiGuard services on FortiManager.

The administrator must enable the fortiguard-anycast option to correctly download all signatures from the local FD

 Loading...

10. What is the purpose of ADOM revisions?

ADOM revisions find unused, duplicate, and unnecessary firewall policies and objects.

ADOM revisions show specific changes in a policy package when it is installed.

ADOM revisions compare previous snapshots of the Policy Package and ADOM-level objects with the device-level database.

ADOM revisions save the current state of all policy packages and objects for an ADO

 Loading...

 Loading...