Free Fortinet FCP_FMG_AD-7.6 Exam Questions

Question 1

Refer to the exhibit.An administrator assigned a new policy package to FortiGate HQ-NGFW-1. In the installation preview, they noticed some settings they did not modify and are unsure about the changes. Based on the exhibit, which two things will happen if they continue with the installation? (Choose two.)

A : FortiGate HQ-NGFW-1 can use FortiManager firmware templates to upgrade firmware and ratings.

B : FortiGate HQ-NGFW-1 can contact the FortiManager acting as FortiGuard Distribution Server (FDS) to download FortiGuard updates.

C : FortiGate HQ-NGFW-1 will use the root_CA3 certificate in firewall address objects or policies.

D : FortiManager will install the CA certificate named root_CA3 to authenticate FortiGate-to-FortiManager communication protocol (FGFM) tunnel connections with FortiGate HQ- NGFW-1.

Answer: B,D

Question 2

Refer to the exhibit.An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM. After the installation operation is performed, which IP/netmask will be installed on Remote-Firewall [VDOM1] for the LAN firewall address object?

A : 21.21.2.5/255.255.255.255

B : 172.16.5.20/255.255.255.255

C : 172.16.5.0/255.255.255.0

D : 10.10.10.5/255.255.255.255

Answer: A

Question 3

Refer to the exhibits.An administrator added BR1-FGT-1 to FortiManager and started importing the policy package. During the process, they saw that they need to choose values from FortiGate or FortiManager. Which conclusion is most clearly supported by the exhibits?

A : BR1-FGT-1 does not support the SSL/SSH profile with HTTPS on port 443.

B : The administrator must match the FortiOS firmware version with the FortiManager ADOM firmware version to resolve the conflict status.

C : The default Firewall Profile-Protocol-Options object is the only profile that does not significantly affect any configuration changes on either FortiManager or FortiGate.

D : FortiManager has a different FortiGuard database compared to FortiGate BR1-FGT-1 for the QUIC protocol.

Answer: C

Question 4

What are two expected results when both FortiManager and FortiGate are behind network address translation NAT devices? Choose two answers

A : FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

B : During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

C : FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.

D : If the FortiGate–FortiManager communication protocol FGFM tunnel is torn down, FortiManager will try to reestablish the FGFM tunnel.

Answer: A,B

Question 5