Free Oct-2026 UPDATED Fortinet FCP_FMG_AD-7.6 Certification Exam Dumps is Online [Q34-Q56]

NO.34 What are two outcomes of ADOM revisions? (Choose two.)

ADOM revisions can save the current state of the entire ADOM.

ADOM revisions do not increase the size of configuration backups.

ADOM revisions can save the current state of all policy packages and objects for an ADOM.

ADOM revisions appear in the Install Policy & Package Settings section of the install wizard.

NO.35 An administrator is copying a system template profile between ADOMs by running the following command:
execute fmprofile export-profile ADOM 3547 /tmp/Backup_File
output dump to file: [/tmp/Backup_File]
Where does this command export the system template profile from?

FortiManager /tmp/Backup_File folder

FortiManager ADOM policy database

ADOM device database

FortiManager configuration backup file

NO.36 An administrator sees that the policy package status of HQ-NGFW-1 is Never Installed. What can you conclude from this status? Choose one answer

The policies have not yet been retrieved from the HQ-NGFW-1 device-level database of FortiManager.

The policy package was never imported to the revision history after HQ-NGFW-1 was registered on FortiManager.

The firewall policies were created or changed in the ADOM, and they need to be installed on the managed HQ-NGFW-1 for the first time.

The firewall policies exist only in the HQ-NGFW-1 device-level database, and no policy package has been assigned to the firewall.

NO.37 Refer to the exhibits. FortiGate HQ-NGFW-1 downloads and validates FortiGuard databases from FortiManager which acts as a local FortiGuard Distribution Server (FDS) in a closed network. An administrator pushes a new firewall policy with an intrusion prevention system (IPS) profile from FortiManager to FortiGate HQ- NGFW-1 However, FortiGate does not recognize the new IPS signature from FortiManager.

What is the most likely reason why FortiGate HQ-NGFW-1 does not recognize the new IPS signature?

FortiGate must enable rating for the FortiManager IP address, 192.168.1.120, in server list 1.

FortiManager and FortiGate have different IPS database versions.

The administrator must enable IPv6 connections for FortiGuard services on FortiManager.

The administrator must enable the fortiguard-anycast option to correctly download all signatures from the local FDS.

NO.38 Which is recommended when you are managing a high volume of logs in your network?

Store logs on FortiManager and use FortiView.

Add and manage FortiAnalyzer from FortiManager.

Enable advanced ADOM mode on FortiManager.

Forward logs from FortiAnalyzer to FortiManager daily.

NO.39 Refer to Exhibit:

Which two actions will occur if you run the script using the Remote FortiGate Directly via CLI option?
Choose two answers

FortiManager will provide a preview of CLI commands before executing this script on a managed FortiGate.

FortiManager will create a new revision history.

FortiGate will auto-updated the FortiManager device-level database.

You will have to install these changes using the Install Wizard.

NO.40 Refer to the exhibit.

An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.
After the installation operation is performed, which IP/netmask will be installed on Remote-Firewall
[VDOM1] for the LAN firewall address object?

21.21.2.5/255.255.255.255

172.16.5.20/255.255.255.255

172.16.5.0/255.255.255.0

10.10.10.5/255.255.255.255

NO.41 An administrator has a FortiGate-HQ device with VDOMs–root, HR and Facilities, currently managed under the FortiManager ADOM–Site1. They try to move VDOM HR to the FortiManager ADOM– Site2, but it does not work.
Why is the administrator not able to move FortiGate-HQ VDOM HR to FortiManager ADOM– Site2?

The FortiGate-HQ must be managed under the FortiManager ADOM–root to allow moving its VDOMs to different ADOMs.

The administrator must have full access in the device layer of FortiGate-HQ VDOM-root before they can VDOMs to different ADOMs.

FortiManager must be in ADOM normal mode, which does not allow VDOMs to be managed separately.

The administrator must delete the FortiGate-HQ device from FortiManager and add it again using the Add Device wizard before moving the VDOM.

NO.42 Refer to the exhibits.

An administrator needs to push a FortiToken Mobile to assign it to HR_user in the HQ-NGFW-1.
However, when installing the policy package, they receive the following error message:

Why is the administrator not able to install the FortiToken on the HQ-NGFW-1 firewall?

The administrator must use a user local meta field to assign FortiToken.

The administrator must use a valid FortiToken that exists on HQ-NGFW-1.

The administrator must use a metadata variable to assign the same FortiToken to multiple users in FortiManager.

The administrator must use per-device mapping to assign the FortiToken to HQ-NGFW-1.

NO.43 Refer to the exhibits.

An administrator has been asked to install the same policies from a central policy package onto the BR1-FGT-
1 firewall.
The administrator added BR1-FGT-1 as a target in the central policy package installation.
What should the administrator do when reinstalling the central policy package on the BR1-FGT-1 firewall?

Assign only one policy package to the firewall because FortiManager does not allow more than one policy package assigned per device at the same time.

Import the policy package to change the unknown status and synchronize the policy package.

Use the install wizard to install the central policy package on the BR1-FGT-1 firewall.

First resolve the modified status in the configuration and provisioning templates to allow a smooth installation.

NO.44 You want to let multiple administrators work in the same ADOM without creating configuration conflicts.
What is the best and the most effective solution to apply?

Configure RADIUS authentication to assign ADOM roles to each user.

Enable workflow mode, which is the only way to prevent concurrent configuration conflicts.

Assign administrators with JSON API access to the FortiManager.

Activate workspace mode in the ADOM settings.

NO.45 Refer to the exhibit.

What can you conclude from the downloaded import report?

FortiManager does not support per-device mapping for firewall addresses.

The administrator will see a new policy package named Remote-FortiGate_root in the FortiManager ADOM database.

FortiManager will change the configuration of REMOTE_SUBNET to match the interface mapping coming in from Remote-FortiGate.

As a result of this policy import process, FortiManager will create a new firewall address called REMOTE_SUBNET in the ADOM database.

NO.46 Which FortiGate configuration settings is part of an ADOM-level database on FortiManager?

NSX-T service template

Security template

Routing

SNMP

NO.47 Refer to the exhibits.

Which IP/netmask will be present in the LAN firewall address object on the Remote-Firewall?

172.16.0.0/255.255.255.0

10.0.0.0/255.255.255.0

192.168.1.0/255.255.255.0

172.16.10.0/255.255.255.0

NO.48 An administrator configures a new BGP peer in the FortiManager device-level database of FortiGate. They reinstall the policy package to the managed FortiGate device without any errors.
However, when the administrator logs in to FortiGate, they do not see the BGP configuration changes. What is the most likely reason why FortiManager did not push the BGP peer changes to FortiGate?

The administrator must run a sanity check on FortiManager to make sure the database is not corrupted.

Fortigate has a BGP template assigned on the FortiManager database.

The administrator must use the Install Wizard and select Install device settings only to push BGP settings

The FortiGate firmware version is different from the FortiManager ADOM version.

NO.49 You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?

The shared device settings will be installed automatically.

The shared policy package will not be moved to the new ADOM automatically.

Any unused objects from a previous ADOM are moved to the new ADOM automatically.

Policy packages will be imported into the new ADOM automatically.

NO.50 Refer to the exhibit.

An administrator has assigned the default system template to install all devices with the FortiAnalyzer IP address 10.0.13.12. However, not all FortiGate devices can reach FortiAnalyzer using the default interface.
Some devices may use the LAN interface, while others may use the WAN interface. How can the administrator change the source interface for FortiGate devices using the default system template? Choose one answer

Use per-device dynamic object configurations at the ADOM level and apply them in the template.

Configure a metadata variable at the ADOM level and use it in the template.

Create a different system template for each FortiGate, if the configuration is different.

Create a meta field on FortiManager system settings of type Device and use it in the template.

NO.51 Refer to the exhibit.

FortiManager is operating behind a network address translation (NAT) device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings.
What is the expected result during discovery?

FortiManager sets both the 100.65.0.120 IP address and 10.0.13.120 IP address on FortiGate.

FortiManager sets both the 100.65.0.120 IP address and 100.65.0.101 IP address on FortiGate.

FortiManager sets the 100.65.0.101 IP address on FortiGate.

FortiManager sets the 100.65.0.120 IP address on FortiGate.

NO.52 An administrator must create a policy and install it on a FortiGate device within an ADOM in backup mode.
How can the administrator perform this task?

Use the Install Wizard located on the device manager.

Enable workflow mode to allow policy creation and approval.

Make sure the ADOM and FortiGate firmware versions match and use the ADOM policy package.

Use a FortiManager script to apply the configuration changes.

NO.53 Refer to the exhibit. Which two statements about the output are true? (Choose two.)

The latest revision history for the managed FortiGate does not match the device-level database.

Configuration changes have been installed on FortiGate, updating policy and device-level database.

The latest revision history for the managed FortiGate does match the FortiManager policy database.

The system template default will override device-level database configurations.

NO.54 Which two items does an FGFM keepalive message include? (Choose two.)

FortiGate IPS version

FortiGate license information

FortiGate configuration checksum

FortiGate uptime

NO.55 An administrator has assigned a global policy package to a new ADOM named ADOM1.
What will happen if the administrator tries to create a new policy package in ADOM1?

The administrator will be able to select the option to assign the global policy package to the new policy package.

FortiManager will automatically assign the global policy package to the new policy package.

FortiManager will automatically install policies on the policy package in ADOM1.

The administrator will have to assign the global policy package from the global ADOM.

NO.56 An administrator, Trainer, who is assigned the Super_User profile, is trying to approve a workflow session that was submitted by another administrator, Student. However, Trainer is unable to approve the workflow session.
What can prevent an admin account that has Super_User rights over the device from approving a workflow session?

Trainer is not a part of workflow approval group.

Trainer must close Student’s workflow session before approving the request.

Trainer must first create their own workflow session to approve student session.

Trainer does not have full rights over this ADOM.

Free Oct-2026 UPDATED Fortinet FCP_FMG_AD-7.6 Certification Exam Dumps is Online [Q34-Q56]

admin

Leave a Reply Cancel reply