FCP_FMG_AD-7.6 Fortinet Exam Questions and Free Practice Test

Question 7

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM.
How can the customer administrator edit the global header policy of the global policy package?

A. The customer administrator can edit the header policy by using workspace mode on the global ADOM.

B. The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.

C. The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.

D. The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.

Correct Answer:D
The global policy package is managed only from the global ADOM by the service provider administrator. Customer administrators with access solely to their ADOM (My_ADOM) cannot edit the global header policy; such changes must be made by the service provider administrator in the global ADOM.

Question 8

What is the purpose of ADOM revisions?

A. ADOM revisions find unused, duplicate, and unnecessary firewall policies and objects.

B. ADOM revisions show specific changes in a policy package when it is installed.

C. ADOM revisions compare previous snapshots of the Policy Package and ADOM-level objects with the device-level database.

D. ADOM revisions save the current state of all policy packages and objects for an ADOM.

Correct Answer:D
ADOM revisions save the current state of all policy packages and objects within an ADOM, allowing administrators to track changes over time and revert to previous configurations if needed.

Question 9

Refer to the exhibit.
FCP_FMG_AD-7.6 dumps exhibit
What are two results from the configuration shown in the exhibit? (Choose two.)

A. Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.

B. The administrator can lock policy blocks and FortiManager global ADOM.

C. The same administrator can lock more than one ADOM at the same time.

D. The administrator must have access to the ADOM to approve changes.

Correct Answer:AB
In normal workspace mode, ungraceful session closures will keep the ADOM locked until the session times out, preventing other administrators from editing.
Normal workspace mode allows administrators to lock policy blocks and the global ADOM, providing granular locking control.

Question 10

Refer to the exhibit.
FCP_FMG_AD-7.6 dumps exhibit
What can you conclude from the downloaded import report?

A. FortiManager does not support per-device mapping for firewall addresses.

B. The administrator will see a new policy package named Remote-FortiGate_root in the FortiManager ADOM database.

C. FortiManager will change the configuration of REMOTE_SUBNET to match the interface mapping coming in from Remote-FortiGate.

D. As a result of this policy import process, FortiManager will create a new firewall address called REMOTE_SUBNET in the ADOM database.

Correct Answer:B
The import report shows that a new policy package named Remote-FortiGate_root will be created in the FortiManager ADOM database, but some firewall addresses and policies failed to import due to interface binding conflicts.

START FCP_FMG_AD-7.6 EXAM