View Full Fortinet FCP_FMG_AD-7.6 Exam Dumps and Practice Test Dumps.

 

Question 241

What is the purpose of a FortiManager ADOM?

1. To provide endpoint protection
2. To store FortiGuard licenses
3. To logically separate managed devices and configurations
4. To replace FortiGate HA

Correct Answer: 3

Explanation

An Administrative Domain, or ADOM, provides logical separation for devices and configuration data within FortiManager. Organizations can use separate ADOMs for different customers, departments, environments, or administrative requirements. This separation helps prevent unrelated devices and configurations from being mixed together. ADOMs also provide an important organizational boundary for policy packages, objects, and managed devices. Proper ADOM design is particularly important in larger environments where multiple groups of devices are administered through the same FortiManager.

Question 242

Which protocol is associated with FortiGate-to-FortiManager management communication?

1. FGFM
2. SMTP
3. FTP
4. SNMP

Correct Answer: 1

Explanation

FGFM is the management protocol used for communication between FortiGate devices and FortiManager. It supports the management relationship required for centralized administration, including communication needed for device management and configuration operations. If FGFM communication is unavailable, FortiManager may be unable to perform operations such as retrieving configurations or installing changes. Troubleshooting an FGFM problem should include checking network connectivity, addressing, required communication paths, and the management status of both the FortiGate and FortiManager.

Question 243

What can a device group provide in FortiManager?

1. Firmware encryption
2. Logical organization of managed devices
3. FortiGuard authentication
4. Database repair

Correct Answer: 2

Explanation

Device groups provide a way to organize managed devices into logical collections. Administrators can group devices based on location, function, customer, environment, or another operational category. This organization makes it easier to locate and manage devices in larger FortiManager deployments. Device groups are different from ADOMs because an ADOM provides a broader administrative and configuration boundary, while device groups are primarily used for organizing devices within the management structure.

Question 244

What does the FortiManager setup wizard primarily assist with?

1. Initial system configuration
2. Policy deletion
3. Database replacement
4. FortiGate hardware repair

Correct Answer: 1

Explanation

The setup wizard assists administrators with the initial configuration of FortiManager after deployment. It can help establish fundamental system settings required before the platform is used for centralized device management. Completing initial configuration correctly is important because network connectivity and administrative access must be available before managed FortiGate devices can be added. Administrators should also verify the resulting settings against their organization’s requirements instead of relying only on the default configuration.

Question 245

Which feature allows administrators to automate supported FortiManager operations?

1. Device Group
2. Security Rating
3. FortiGuard cache
4. API

Correct Answer: 4

Explanation

The FortiManager API allows external applications and automation tools to interact with supported FortiManager functions programmatically. This can reduce manual work when administrators need to perform repetitive management operations or integrate FortiManager with other systems. API requests generally require appropriate authentication and must follow the supported API structure. Administrators should also review returned HTTP status information and response data when troubleshooting API requests. Proper API usage can make centralized management more efficient in larger environments.

Question 246

Which HTTP response normally indicates that authentication has failed or is required?

1. 200
2. 401
3. 302
4. 503

Correct Answer: 2

Explanation

HTTP status code 401 indicates that authentication is required or that the provided authentication information was not accepted. When a FortiManager API request returns a 401 response, the administrator should review the authentication credentials, session information, or authentication procedure being used by the client. A 200 response normally indicates successful processing at the HTTP level. Understanding common response codes helps administrators quickly identify whether an API problem is related to authentication or another part of the request.

Question 247

What should an API client generally perform before authenticated operations?

1. Delete the ADOM
2. Restart FortiManager
3. Establish an authenticated session
4. Install a policy package

Correct Answer: 3

Explanation

An API client generally needs to establish an authenticated session before performing protected FortiManager operations. The authentication process verifies that the client is authorized to interact with the system. Subsequent requests can then use the established session or authentication information as required by the API. If authentication fails, later requests may also fail. Administrators developing automation should therefore test the login process first and verify the returned session or authentication information before troubleshooting later API operations.

Question 248

Which FortiManager feature helps identify objects referenced by policies?

1. Object usage
2. FGFM keepalive
3. Device discovery
4. FortiGuard override

Correct Answer: 1

Explanation

Object usage information helps administrators determine where a configuration object is referenced. This is particularly useful when reviewing address objects, service objects, or other reusable configuration elements before making changes. If an object is referenced by a policy, deleting or modifying it may affect that policy. Reviewing usage before cleanup helps prevent configuration errors and failed installations. It also assists administrators in identifying objects that may genuinely be unused and suitable for later cleanup.

Question 249

What is the main benefit of interface mapping?

1. It disables unsupported features
2. It changes ADOM permissions
3. It maps centralized interfaces to device-specific interfaces
4. It creates FortiGuard packages

Correct Answer: 3

Explanation

Interface mapping allows centralized policy configurations to correspond with the actual interface names used on individual FortiGate devices. Different devices may use different interface names even though they perform the same network role. Mapping allows a shared policy structure to accommodate these differences. Before installation, administrators should verify that the mappings point to the correct interfaces. Incorrect mapping can cause installation problems or result in policies being applied to unintended network interfaces.

Question 250

What should be reviewed before deleting an apparently unused object?

1. Its usage and dependencies
2. The administrator’s browser
3. The FortiManager hostname
4. The number of ADOMs only

Correct Answer: 1

Explanation

An object that appears unused should be reviewed for references and dependencies before deletion. FortiManager provides object usage information that can help determine whether the object is referenced by policies or other configuration elements. Removing an object that is still required can create errors or alter policy behavior. Administrators should therefore confirm that the object is genuinely unnecessary before deleting it. This is especially important in large environments where configuration dependencies may not be immediately obvious.

Question 251

What is the purpose of an installation target?

1. It identifies the device receiving the configuration
2. It defines an administrator password
3. It creates an ADOM
4. It controls FortiGuard licensing

Correct Answer: 1

Explanation

An installation target identifies the managed device or devices that should receive a configuration change. This information is important during policy and configuration deployment because the same policy package may be associated with multiple FortiGates. Reviewing the target helps ensure that changes are sent only to the intended devices. Administrators should verify installation targets before deployment, particularly in production environments where an incorrect target could cause unexpected configuration changes on unrelated systems.

Question 252

What does installation validation help detect?

1. Possible configuration problems before deployment
2. New hardware failures
3. Administrator login attempts
4. FortiManager license invoices

Correct Answer: 1

Explanation

Installation validation helps identify potential configuration problems before changes are deployed to managed FortiGate devices. Validation may identify issues involving policies, objects, interfaces, or other configuration dependencies. Finding such problems before installation allows administrators to correct them without affecting production devices. Validation should be combined with installation preview and target verification. A successful validation does not replace the need to review the proposed changes, but it provides an additional safeguard before deployment.

Question 253

What is the purpose of configuration revision history?

1. To monitor network bandwidth
2. To record previous configuration states
3. To replace device groups
4. To manage FortiGuard contracts

Correct Answer: 2

Explanation

Configuration revision history records previous configuration states and provides administrators with a historical view of changes. It can be used to investigate when configuration modifications occurred and compare different revisions. This is valuable when troubleshooting because administrators can determine whether a recent change corresponds with the beginning of a problem. Revision history may also support restoration of an earlier configuration when appropriate. Administrators should carefully review the desired revision before performing any rollback or restoration activity.

Question 254

When investigating unexpected configuration changes, what is useful?

1. Revision history and configuration comparison
2. Device group colors
3. Monitor settings
4. FortiGuard package names

Correct Answer: 1

Explanation

Revision history and configuration comparison provide useful information when investigating unexpected configuration changes. Revision history can show how the configuration changed over time, while comparison tools can identify differences between configuration states. Together, these features can help administrators determine whether a change was introduced through FortiManager, made locally on a FortiGate, or associated with another management operation. Reviewing this information before making additional changes helps preserve evidence and reduces the chance of overwriting useful configuration data.

Question 255

What should an administrator do before reverting to an older revision?

1. Verify the revision and expected configuration changes
2. Delete all device groups
3. Disable FGFM
4. Remove FortiGuard services

Correct Answer: 1

Explanation

Before reverting to an older configuration revision, administrators should verify that the selected revision is the correct one and understand what changes it contains. A rollback can restore older settings while removing or replacing newer configuration changes. Reviewing the revision history and comparing configuration states helps prevent accidental restoration of an inappropriate version. Administrators should also consider the impact on managed devices and follow the organization’s change-control procedures before performing the rollback.

Question 256

What can a CLI script be used for in FortiManager?

1. Automating supported configuration commands
2. Creating physical interfaces
3. Replacing FortiManager hardware
4. Renewing FortiGuard contracts

Correct Answer: 1

Explanation

CLI scripts can automate supported command-line configuration tasks on managed FortiGate devices. They are useful when administrators need to apply the same set of commands to one or more devices without entering each command manually. Scripts can also support repetitive administrative tasks and controlled deployments. Before executing a script, administrators should verify command compatibility, target devices, and expected results. Testing is particularly important when the same script will be applied across devices with different models or FortiOS versions.

Question 257

Why should CLI scripts be tested before broad deployment?

1. To verify command compatibility and expected behavior
2. To increase the number of ADOMs
3. To disable object usage
4. To replace policy packages

Correct Answer: 1

Explanation

Testing a CLI script helps confirm that its commands are supported and produce the expected results on the intended FortiGate devices. Differences in FortiOS versions, models, or configuration conditions can cause a command to succeed on one device and fail on another. Testing can expose syntax problems and device-specific limitations before a script is deployed widely. Administrators should review execution results and make necessary adjustments before scheduling or applying the script to production devices.

Question 258

What can cause a scheduled script to fail even when its commands are valid?

1. The target device is unreachable
2. The policy name is short
3. The ADOM contains several objects
4. The administrator uses a large monitor

Correct Answer: 1

Explanation

A scheduled script depends on successful communication between FortiManager and the target device. If the FortiGate is unreachable or its management connection is unavailable when the scheduled task runs, the script may fail even though its commands are valid. Administrators should verify device status, network connectivity, FGFM communication, and scheduling settings. Execution logs can help determine whether the failure occurred before the script reached the device or after command processing began.

Question 259

What does FortiManager’s local FortiGuard capability help provide?

1. Centralized distribution of supported FortiGuard packages
2. Replacement administrator accounts
3. Physical firewall interfaces
4. New ADOM hardware

Correct Answer: 1

Explanation

FortiManager can provide local FortiGuard distribution capabilities for supported services and packages. By acting as a local distribution point or cache, it can help managed FortiGate devices obtain required FortiGuard updates through the organization’s centralized infrastructure. This can be useful when administrators want to control update distribution or reduce repeated external downloads. Proper licensing, connectivity, package availability, and configuration are required. Administrators should verify the FortiGuard service status when troubleshooting distribution problems.

Question 260

Which information is important when troubleshooting FortiGuard service problems?

1. Contract and connection status
2. Device group color
3. Policy package name only
4. Administrator screen resolution

Correct Answer: 1

Explanation

FortiGuard troubleshooting should include verification of contract information and connection status. A valid service entitlement is important for supported FortiGuard functionality, while connection status helps determine whether FortiManager or the managed FortiGate can communicate with the required service. Administrators should also review server settings, connectivity, package status, and relevant diagnostic information when necessary. Checking these areas systematically helps distinguish licensing problems from network or configuration problems affecting FortiGuard services.