Fortinet FCP_FMG_AD-7.6 Exam Questions

Question 6 of 47

Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

When FortiManager installs device-level changes on a managed device

When changes to the device-level database are made on FortiManager

When FortiManager is auto-updated with configuration changes made directly on a managed device

When a provisioning template is assigned to a managed device on the device-level database

Correct Answer: B, C

Question 7 of 47

An administrator has assigned a global policy package to a new ADOM named ADOM1.
What will happen if the administrator tries to create a new policy package in ADOM1?

The administrator will be able to select the option to assign the global policy package to the new policy package.

FortiManager will automatically assign the global policy package to the new policy package.

FortiManager will automatically install policies on the policy package in ADOM1.

The administrator will have to assign the global policy package from the global ADOM.

Correct Answer: A

Question 8 of 47

Refer to the exhibits.
Exam FCP_FMG_AD-7.6: Question 8 - Image 1

Exam FCP_FMG_AD-7.6: Question 8 - Image 2

Exam FCP_FMG_AD-7.6: Question 8 - Image 3

FortiGate HQ-NGFW-1 downloads and validates FortiGuard databases from FortiManager which acts as a local FortiGuard Distribution Server (FDS) in a closed network. An administrator pushes a new firewall policy with an intrusion prevention system (IPS) profile from FortiManager to FortiGate HQ- NGFW-1 However, FortiGate does not recognize the new IPS signature from FortiManager.
What is the most likely reason why FortiGate HQ-NGFW-1 does not recognize the new IPS signature?

FortiGate must enable rating for the FortiManager IP address, 192.168.1.120, in server list 1.

FortiManager and FortiGate have different IPS database versions.

The administrator must enable IPv6 connections for FortiGuard services on FortiManager.

The administrator must enable the fortiguard-anycast option to correctly download all signatures from the local FDS.

Correct Answer: B

Question 9 of 47

Which is recommended when you are managing a high volume of logs in your network?

Store logs on FortiManager and use FortiView.

Add and manage FortiAnalyzer from FortiManager.

Enable advanced ADOM mode on FortiManager.

Forward logs from FortiAnalyzer to FortiManager daily.

Correct Answer: B

Question 10 of 47

While attempting to push a NetFlow configuration script through the FortiManager policy package: an administrator encounters an error stating that an object is unrecognized in line 4.
Exam FCP_FMG_AD-7.6: Question 10 - Image 1

Exam FCP_FMG_AD-7.6: Question 10 - Image 1

What must the administrator do to successfully apply the NetFlow configuration script and avoid the object unrecognized error?

Make sure the user running the script has full access to the VDOM—AGEUSR.

Run the script on the device database.

Use metadata variables if they use VDOMs in the script.

Create a normalized interface on the policy layer before running the script.

Correct Answer: C