Fortinet FCP_FMG_AD-7.6 Online Practice Questions and Exam Preparation

Fortinet FCP_FMG_AD-7.6 Online Questions & Answers

• Question 51:

  Which action creates a new ADOM revision automatically?

  A. Viewing the policy package
  B. Installing a policy package
  C. Locking an ADOM
  D. Running a script on the remote device
  B. Installing a policy package

• Question 52:

  An administrator is in the process of copying a system template profile between ADOMs by running the following command: execute fmprofile import-profile ADOM2 3547 /tmp/myfile.

  Where does this command import the system template profile from?

  A. FortiManager file system
  B. ADOM2 object database
  C. ADOM2 device database
  D. Source ADOM policy database
  A. FortiManager file system

• Question 53:

  An administrator created a new global policy package that includes header and footer policies and then assigned it to an ADOM.

  What are two outcomes of this action? (Choose two.)

  A. To assign another global policy package later to the same ADOM. you must unassign this policy first.
  B. After you assign the global policy package to an ADOM. the impacted policy packages become hidden in that ADOM.
  C. You can edit or delete all the global objects in the global ADOM.
  D. You must manually move the header and footer policies after the policy assignment.
  A. To assign another global policy package later to the same ADOM. you must unassign this policy first.
  C. You can edit or delete all the global objects in the global ADOM.

• Question 54:

  Refer to the exhibit.

  

  Which two statements about the output are true? (Choose two.)

  A. The latest revision history for the managed FortiGate does not match the device-level database.
  B. Configuration changes have been installed on FortiGate, which means the FortiGate configuration has been changed.
  C. Configuration changes directly made on FortiGate have been automatically updated to the device-level database.
  D. The latest revision history for the managed FortiGate does match the FortiGate running configuration.
  A. The latest revision history for the managed FortiGate does not match the device-level database.
  D. The latest revision history for the managed FortiGate does match the FortiGate running configuration.

• Question 55:

  Which is recommended when you are managing a high volume of logs in your network?

  A. Store logs on FortiManager and use FortiView.
  B. Add and manage FortiAnalyzer from FortiManager.
  C. Enable advanced ADOM mode on FortiManager.
  D. Forward logs from FortiAnalyzer to FortiManager daily.
  B. Add and manage FortiAnalyzer from FortiManager.

• Question 56:

  The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error:

  config vpn ipsec phase2-interface [parameter(s) invalid.

  detail: object mismatch] What must the administrator do to resolve the script error and successfully apply the IPsec configuration?

  A. Add the end command after finishing the IPsec phase 1-interface configuration block.
  B. Use IPsec templates to deploy provisioning templates.
  C. Add a second config vpn ipsec phase2-interface block without linking it to phase1.
  D. Run the script using the policy package or ADOM database method.
  A. Add the end command after finishing the IPsec phase 1-interface configuration block.

• Question 57:

  An administrator installs a policy package and selects Preview before proceeding.

  What is the primary purpose of the preview step?

  A. Validate administrator permissions
  B. Compare FortiGate firmware versions
  C. Review configuration changes before installation
  D. Lock the ADOM automatically
  C. Review configuration changes before installation

• Question 58:

  Refer to the exhibits.

  

  

  

  FortiGate HQ-NGFW-1 downloads and validates FortiGuard databases from FortiManager which acts as a local FortiGuard Distribution Server (FDS) in a closed network. An administrator pushes a new firewall policy with an intrusion prevention system (IPS) profile from FortiManager to FortiGate HQ-NGFW-1 However, FortiGate does not recognize the new IPS signature from FortiManager.

  What is the most likely reason why FortiGate HQ-NGFW-1 does not recognize the new IPS signature?

  A. FortiGate must enable rating for the FortiManager IP address, 192.168.1.120, in server list 1.
  B. FortiManager and FortiGate have different IPS database versions.
  C. The administrator must enable IPv6 connections for FortiGuard services on FortiManager.
  D. The administrator must enable the fortiguard-anycast option to correctly download all signatures from the local FDS.
  B. FortiManager and FortiGate have different IPS database versions.

• Question 59:

  Which output is displayed right after moving the ISFW device from one ADOM to another?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 60:

  An administrator wants to configure and manage multiple objects in the FortiManager database and give access to other users who work in the same database.

  To stay in control of the changes made to firewall policies by other team members, the administrator needs a setup where all modifications go through a central check before they can be installed.

  How can the administrator create this setup?

  A. Enable the prompt asking the administrator to accept firewall policies changes before saving.
  B. Enable the workspace (for all ADOMs) to control all changes made by any administrator.
  C. Enable device lock and the advanced mode feature in the ADOM.
  D. Enable workflow mode and the ADOM lock feature.
  D. Enable workflow mode and the ADOM lock feature.