Fortinet FCP_FMG_AD-7.6 Online Practice Questions and Exam Preparation

Fortinet FCP_FMG_AD-7.6 Online Questions & Answers

• Question 41:

  Refer to the exhibit.

  

  If both FortiManager and FortiGate are behind NAT devices, what are the two expected results? (Choose two.)

  A. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
  B. FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.
  C. If the FGFM tunnel is torn down, FortiManager will try to re-establish the FGFM tunnel.
  D. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.
  A. FortiGate is discovered by FortiManager through the FortiGate NATed IP address.
  D. During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

• Question 42:

  An administrator wants to ensure FortiGate devices behind NAT receive updates from FortiManager.

  Which two items must be configured correctly? (Choose two.)

  A. NAT public IP on FortiManager
  B. Correct port forwarding on the NAT device
  C. Enable IPv6 FortiGuard
  D. Disable FortiGuard anycast
  A. NAT public IP on FortiManager
  B. Correct port forwarding on the NAT device

• Question 43:

  After correcting a policy package configuration issue, you want to prevent administrators from repeating the mistake that caused the issue.

  Which FortiManager approach best meets this need?

  A. Configure an TCL script to run locally on FortiManager for each FortiGate.
  B. Restrict administrators with an administration profile from viewing the revision history to limit who can make changes.
  C. Enable the change note to require administrators to add a note whenever they change object configurations.
  D. Enable a workflow requiring approval before installing policy packages on any FortiGate.
  D. Enable a workflow requiring approval before installing policy packages on any FortiGate.

• Question 44:

  Refer to the exhibits.

  

  

  An administrator runs the reload failure commanddiagnose test deploymanager reloadconf 262on

  FortiManager.

  Why does the administrator receive an error message?

  A. The administrator must use the FortiGate name instead of the ID number.
  B. The administrator just recently added FortiGate HQ-NGFW as a model device.
  C. FortiManager requires the FortiGate serial number instead of the ID number.
  D. FortiManager does not support FortiOS version 7.0.
  B. The administrator just recently added FortiGate HQ-NGFW as a model device.

• Question 45:

  An administrator has a FortiGate-HQ device with VDOMs--root, HR and Facilities, currently managed under the FortiManager ADOM--Site1. They try to move VDOM HR to the FortiManager ADOM--Site2, but it does not work.

  Why is the administrator not able to move FortiGate-HQ VDOM HR to FortiManager ADOM--Site2?

  A. The FortiGate-HQ must be managed under the FortiManager ADOM--root to allow moving its VDOMs to different ADOMs.
  B. The administrator must have full access in the device layer of FortiGate-HQ VDOM-root before they can VDOMs to different ADOMs.
  C. FortiManager must be in ADOM normal mode, which does not allow VDOMs to be managed separately.
  D. The administrator must delete the FortiGate-HQ device from FortiManager and add it again using the Add Device wizard before moving the VDOM.
  C. FortiManager must be in ADOM normal mode, which does not allow VDOMs to be managed separately.

• Question 46:

  Which configuration setting for FortiGate is part of an ADOM-level database on FortiManager?

  A. NSX-T Service Template
  B. Routing
  C. SNMP
  D. Security profiles
  D. Security profiles

• Question 47:

  An administrator has assigned a global policy package to a new ADOM called ADOM1.

  What will happen if the administrator tries to create a new policy package in ADOM1?

  A. When creating a new policy package, the administrator can select the option to assign the global policy package to the new policy package.
  B. When a new policy package is created, the administrator must assign the global policy package from the global ADOM.
  C. When a new policy package is created, the administrator must import the global policy package to ADOM1.
  D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.
  D. When the new policy package is created, FortiManager automatically assigns the global policy package to the new policy package.

• Question 48:

  What is the purpose of normalized interfaces in FortiManager?

  A. To simplify firmware upgrades
  B. To standardize interface names across devices
  C. To increase policy installation speed
  D. To replace per-device mapping
  B. To standardize interface names across devices

• Question 49:

  Which two statements about scheduled backups on FortiManager are true? (Choose two.)

  A. They back up all devices and the FortiGuard database.
  B. They can be configured using the CLI and the GUI.
  C. They put FortiManager in offline mode.
  D. They support FTP, SCP, and SFTP.
  B. They can be configured using the CLI and the GUI.
  D. They support FTP, SCP, and SFTP.

• Question 50:

  Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

  A. When FortiManager installs device-level changes on a managed device
  B. When changes to the device-level database are made on FortiManager
  C. When FortiManager is auto-updated with configuration changes made directly on a managed device
  D. When a provisioning template is assigned to a managed device on the device-level database
  A. When FortiManager installs device-level changes on a managed device
  C. When FortiManager is auto-updated with configuration changes made directly on a managed device

  ---

  Explanation

  .