[Dec-2025] Get 100% Real FCP_FMG_AD-7.6 Free Online Practice Test
BEST Verified Fortinet FCP_FMG_AD-7.6 Exam Questions (2025)
NEW QUESTION # 10
Which two conditions trigger FortiManager to create a new revision history? (Choose two.)
- A. When FortiManager is auto-updated with configuration changes made directly on a managed device
- B. When a provisioning template is assigned to a managed device on the device-level database
- C. When FortiManager installs device-level changes on a managed device
- D. When changes to the device-level database are made on FortiManager
Answer: A,D
Explanation:
FortiManager creates a new revision history entry whenever changes are made to the device-level database on FortiManager.
FortiManager also creates a new revision when it auto-updates its database with configuration changes detected directly on a managed device.
NEW QUESTION # 11
An administrator must create a policy and install it on a FortiGate device within an ADOM in backup mode.
How can the administrator perform this task?
- A. Use a FortiManager script to apply the configuration changes.
- B. Use the Install Wizard located on the device manager.
- C. Make sure the ADOM and FortiGate firmware versions match and use the ADOM policy package.
- D. Enable workflow mode to allow policy creation and approval.
Answer: A
Explanation:
In backup mode, FortiManager does not directly manage policy installation via the usual ADOM policy packages; instead, administrators use FortiManager scripts to push configuration changes, including policies, to FortiGate devices.
NEW QUESTION # 12
Refer to the exhibit.
An administrator added a FortiGate device to FortiManager with the default object settings at the ADOM layer.
What can you conclude from the import policy package process of the HQ-NGFW- 1 device?
- A. The administrator must manually create the port4 interface on the ADOM layer to avoid import policy errors.
- B. FortiGate may not work as expected when the administrator does not import all objects.
- C. FortiManager will create LAN, port4, and port6 as normalized interfaces at the ADOM layer.
- D. The administrator must select Per Platform for all interfaces to correctly detect all interfaces from HQ- NGFW-1.
Answer: C
Explanation:
The import process shows that FortiManager will create normalized interfaces named LAN, port4, and port6 at the ADOM layer, mapping them to the corresponding device interfaces based on the import settings.
NEW QUESTION # 13
An administrator has a FortiGate-HQ device with VDOMs-root, HR and Facilities, currently managed under the FortiManager ADOM-Site1. They try to move VDOM HR to the FortiManager ADOM-Site2, but it does not work.
Why is the administrator not able to move FortiGate-HQ VDOM HR to FortiManager ADOM-Site2?
- A. FortiManager must be in ADOM normal mode, which does not allow VDOMs to be managed separately.
- B. The administrator must have full access in the device layer of FortiGate-HQ VDOM-root before they can VDOMs to different ADOMs.
- C. The FortiGate-HQ must be managed under the FortiManager ADOM-root to allow moving its VDOMs to different ADOMs.
- D. The administrator must delete the FortiGate-HQ device from FortiManager and add it again using the Add Device wizard before moving the VDOM.
Answer: C
Explanation:
FortiGate devices must be managed under the FortiManager ADOM corresponding to the root VDOM to allow their individual VDOMs to be moved and managed in different ADOMs. Managing the root VDOM in a different ADOM prevents moving subordinate VDOMs across ADOMs.
NEW QUESTION # 14
Refer to the exhibit.
What are two results from the configuration shown in the exhibit? (Choose two.)
- A. The administrator must have access to the ADOM to approve changes.
- B. The administrator can lock policy blocks and FortiManager global ADOM.
- C. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.
- D. The same administrator can lock more than one ADOM at the same time.
Answer: B,C
Explanation:
In normal workspace mode, ungraceful session closures will keep the ADOM locked until the session times out, preventing other administrators from editing.
Normal workspace mode allows administrators to lock policy blocks and the global ADOM, providing granular locking control.
NEW QUESTION # 15
Company policy dictates that any time a change is made to a policy package on FortiManager an ADOM revision is created before the change installed, and that revision is held for a minimum of 90 days.
Over the past three months, each installed change has resulted in several unused policies and duplicate objects.
The FortiManager administrator plans to upgrade the FortiGate devices and then upgrade the FortiManager ADOM from version 7.4 to 7.6.
Which action can the administrator take to avoid slow ADOM upgrades?
- A. Find unused firmware templates, then delete them before upgrading.
- B. Limit ADOM revisions before upgrading.
- C. Check and repair the global configuration database before upgrading.
- D. Export firewall policies to Excel, delete them on the ADOM. then reimport them after upgradingthe ADOM.
Answer: B
Explanation:
Limiting ADOM revisions reduces the number of stored historical configurations, which helps avoid performance degradation and slow ADOM upgrades caused by a large volume of revisions.
NEW QUESTION # 16
Refer to the exhibit.
Which two results occur if you run the script using theDevice Databaseoption? (Choose two.)
- A. The device Config Status is tagged as Modified.
- B. The administrator must install these changes on a managed device using the Install Wizard.
- C. The script history shows the successful installation of the script on the remote FortiGate.
- D. The successful execution of a script on the Device Database creates a new revision history.
Answer: A,B
Explanation:
Running a script on the Device Database marks the configuration as modified but does not immediately apply changes to the device.
The administrator must use the Install Wizard to push and install these changes from the Device Database onto the managed device.
NEW QUESTION # 17
Which is recommended when you are managing a high volume of logs in your network?
- A. Add and manage FortiAnalyzer from FortiManager.
- B. Store logs on FortiManager and use FortiView.
- C. Forward logs from FortiAnalyzer to FortiManager daily.
- D. Enable advanced ADOM mode on FortiManager.
Answer: A
Explanation:
Adding and managing FortiAnalyzer from FortiManager is recommended for handling a high volume of logs, as FortiAnalyzer is designed specifically for centralized log management, analysis, and reporting, which offloads this workload from FortiManager.
NEW QUESTION # 18
Refer to the exhibit.
An administrator created two new meta fields in FortiManager.
Which operation can you perform with these parameters?
- A. You can add them to objects as custom attributes.
- B. You can invoke them using the $ character.
- C. You can export them to be used in other ADOMs.
- D. You can use them as variables in scripts.
Answer: A
Explanation:
Meta fields in FortiManager can be added to objects as custom attributes, allowing administrators to categorize and add additional information to firewall objects for easier management and identification.
NEW QUESTION # 19
An administrator is copying a system template profile between ADOMs by running the following command:
execute fmprofile export-profile ADOM 3547 /tmp/Backup_File
output dump to file: [/tmp/Backup_File]
Where does this command export the system template profile from?
- A. FortiManager ADOM policy database
- B. FortiManager /tmp/Backup_File folder
- C. ADOM device database
- D. FortiManager configuration backup file
Answer: A
Explanation:
The command exports the system template profile from the FortiManager ADOM policy database, which stores the configuration templates for devices within that ADOM.
NEW QUESTION # 20
An administrator has assigned a global policy package to a new ADOM named ADOM1.
What will happen if the administrator tries to create a new policy package in ADOM1?
- A. The administrator will have to assign the global policy package from the global ADOM.
- B. FortiManager will automatically assign the global policy package to the new policy package.
- C. The administrator will be able to select the option to assign the global policy package to the new policy package.
- D. FortiManager will automatically install policies on the policy package in ADOM1.
Answer: C
Explanation:
When a global policy package is assigned to an ADOM, administrators creating new policy packages within that ADOM have the option to select and assign the global policy package to the new policy package if desired.
NEW QUESTION # 21
Refer to the exhibit.
FortiManager is operating behind a network address translation (NAT) device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings.
What is the expected result during discovery?
- A. FortiManager sets the 100.65.0.120 IP address on FortiGate.
- B. FortiManager sets both the 100.65.0.120 IP address and 10.0.13.120 IP address on FortiGate.
- C. FortiManager sets the 100.65.0.101 IP address on FortiGate.
- D. FortiManager sets both the 100.65.0.120 IP address and 100.65.0.101 IP address on FortiGate.
Answer: A
Explanation:
When FortiManager is behind a NAT device, setting the NATed IP address (100.65.0.120) in the system admin settings causes FortiManager to use that NATed IP address for communication and configuration with FortiGate during discovery and management operations.
NEW QUESTION # 22
Refer to the exhibit.
If the monitored interface for the primary FortiManager device fails, what must you do to maintain high availability (HA)?
- A. Reconfigure the primary device to remove the peer IP address of the failed device from its configuration.
- B. The FortiManager HAfailover is transparent to administrators and does not require any additional action.
- C. Manually promote one of the working secondary devices to the primary role: and reboot the original primary device to remove the peer IP address of the failed device.
- D. Check the integrity database of the primary device to force a secondary device to become the new primary with all active interfaces.
Answer: B
Explanation:
In a FortiManager HA cluster configured with VRRP failover, the failover process is automatic and transparent to administrators. If the monitored interface on the primary device fails, the secondary device takes over without requiring manual intervention to maintain HA.
NEW QUESTION # 23
A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM.
How can the customer administrator edit the global header policy of the global policy package?
- A. The customer administrator can edit the header policy by using workspace mode on the global ADOM.
- B. The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.
- C. The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.
- D. The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.
Answer: D
Explanation:
The global policy package is managed only from the global ADOM by the service provider administrator.
Customer administrators with access solely to their ADOM (My_ADOM) cannot edit the global header policy; such changes must be made by the service provider administrator in the global ADOM.
NEW QUESTION # 24
......
FCP_FMG_AD-7.6 Exam Dumps, Practice Test Questions BUNDLE PACK: https://www.trainingdump.com/Fortinet/FCP_FMG_AD-7.6-practice-exam-dumps.html
The Best Practice Test Preparation for the FCP_FMG_AD-7.6 Certification Exam: https://drive.google.com/open?id=1jlC3DOuANz7hMFmJebKcz2pZAPA82I94