Fortinet FCP_FMG_AD-7.6 Online Practice Questions and Exam Preparation

Fortinet FCP_FMG_AD-7.6 Online Questions & Answers

• Question 61:

  Refer to the exhibit.

  

  An administrator is importing a new device into FortiManager and has selected the options shown in the exhibit.

  What will happen if the administrator makes changes and then installs the modified policy package on this managed FortiGate?

  A. Policies not imported prompt a confirmation before being deleted.
  B. Policies not imported are marked as modified for future import attempts.
  C. Policies not imported remain untouched on the managed FortiGate.
  D. Policies not imported are deleted on the managed FortiGate during the installation.
  D. Policies not imported are deleted on the managed FortiGate during the installation.

• Question 62:

  Refer to the exhibit which shows the Download Import Report.

  

  Why is FortiManager failing to import firewall policy ID 1?

  A. Policy ID 1 is configured from the interface any to port6. FortiManager rejects the request to import this policy because the any interface does not exist on FortiManager
  B. Policy ID 1 for this managed FortiGate already exists on FortiManager in the policy package named Remote-FortlGate.
  C. Policy ID 1 has an address object that already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.
  D. Policy ID 1 does not have the ADOM Interface mapping configured on FortiManager.
  C. Policy ID 1 has an address object that already exists in the ADOM database with any as the interface association, and conflicts with the address object interface association locally on FortiGate.

• Question 63:

  What must you consider before deciding to use FortiManager to manage a FortiAnalyzer device?

  A. Confirm that FortiManager has enough storage capacity for the expected logs.
  B. Ensure that FortiAnalyzer features are installed in advance.
  C. Check whether FortiManager is part of a high availability (HA) cluster.
  D. Determine whether the VDOMs of the same FortiGate will be assigned to different ADOMs.
  D. Determine whether the VDOMs of the same FortiGate will be assigned to different ADOMs.

• Question 64:

  Push updates are failing on a FortiGate device located behind a network address translation (NAT) device?

  Which two settings should the administrator check to correct this problem? (Choose two.)

  A. Make sure the NAT device IP address and the correct ports are configured on FortiManager.
  B. Make sure FortiGuard updates and web service are enabled on the FortiGuard service interface.
  C. Make sure the virtual IP address and the correct ports are configured on the NAT device.
  D. Make sure the Bind to IP address option on the FortiGuard service interface is set to the virtual IP address from the NAT device.
  A. Make sure the NAT device IP address and the correct ports are configured on FortiManager.
  C. Make sure the virtual IP address and the correct ports are configured on the NAT device.

• Question 65:

  Refer to the exhibit.

  

  An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.

  After the installation operation is performed, which IP/netmask will be installed on Remote-Firewall [VDOM1] for the LAN firewall address object?

  A. 21.21.2.5/255.255.255.255
  B. 172.16.5.20/255.255.255.255
  C. 172.16.5.0/255.255.255.0
  D. 10.10.10.5/255.255.255.255
  C. 172.16.5.0/255.255.255.0

• Question 66:

  An administrator has assigned a global policy package to a new ADOM named ADOM1.

  What will happen if the administrator tries to create a new policy package in ADOM1?

  A. The administrator will be able to select the option to assign the global policy package to the new policy package.
  B. FortiManager will automatically assign the global policy package to the new policy package.
  C. FortiManager will automatically install policies on the policy package in ADOM1.
  D. The administrator will have to assign the global policy package from the global ADOM.
  A. The administrator will be able to select the option to assign the global policy package to the new policy package.

• Question 67:

  Refer to the exhibit.

  

  How will FortiManager try to get updates tor antivirus and IPS?

  A. From the list of configured override servers or public FDN servers
  B. From the configured override server IP address 10.0.1.50 only
  C. From the default server fds1.fortinet.com
  D. From public FDNI server IP address with the fourth highest octet only
  B. From the configured override server IP address 10.0.1.50 only

• Question 68:

  An administrator would like to review, approve, or reject all the firewall policy changes made by the junior administrators.

  How should the workspace mode settings be configured on FortiManager?

  A. Set to workspace and using the policy locking feature
  B. Set to read/write and using the policy locking feature
  C. Set to workflow and using the ADOM locking feature
  D. Set to normal and using the approval group feature
  C. Set to workflow and using the ADOM locking feature

• Question 69:

  What is the purpose of ADOM revisions?

  A. ADOM revisions find unused, duplicate, and unnecessary firewall policies and objects.
  B. ADOM revisions show specific changes in a policy package when it is installed.
  C. ADOM revisions compare previous snapshots of the Policy Package and ADOM-level objects with the device-level database.
  D. ADOM revisions save the current state of all policy packages and objects for an ADOM.
  D. ADOM revisions save the current state of all policy packages and objects for an ADOM.

• Question 70:

  Refer to the exhibit.

  

  What can you conclude from the failed installation log shown in the exhibit?

  A. Policy ID 2 is installed in the disabled state.
  B. Policy ID 2 is installed without the remote user student.
  C. Policy ID 2 will not be installed.
  D. Policy ID 2 is installed without a source address.
  B. Policy ID 2 is installed without the remote user student.