Free FCP-FMG-AD-7-6 Fortinet FCP-FMG-AD-7-6 Practice Test Question

Question 1 (Topic 1)

Refer to the exhibit. FortiManager is operating behind a network address translation (NAT) device, and the administrator configured the FortiManager NATed IP address under the FortiManager system administration settings. What is the expected result during discovery?

Select an option, then click Submit answer.

○ FortiManager sets both the 100.65.0.120 IP address and 10.0.13.120 IP address on FortiGate.
○ FortiManager sets both the 100.65.0.120 IP address and 100.65.0.101 IP address on FortiGate.
○ FortiManager sets the 100.65.0.101 IP address on FortiGate.
○ FortiManager sets the 100.65.0.120 IP address on FortiGate.

Question 2 (Topic 1)

Refer to the exhibit. An administrator added a FortiGate device to FortiManager with the default object settings at the ADOM layer. What can you conclude from the import policy package process of the HQ-NGFW- 1 device?

Select an option, then click Submit answer.

○ The administrator must select Per Platform for all interfaces to correctly detect all interfaces from HQ-NGFW-1.
○ The administrator must manually create the port4 interface on the ADOM layer to avoid import policy errors.
○ FortiManager will create LAN, port4, and port6 as normalized interfaces at the ADOM layer.
○ FortiGate may not work as expected when the administrator does not import all objects.

Reference / correct answer:

FortiManager will create LAN, port4, and port6 as normalized interfaces at the ADOM layer.

Most accepted answer: C. FortiManager will create LAN, port4, and port6 as normalized interfaces at the ADOM layer.

Community votes: C=2, D=1

Selected Answer: C A. Incorrect — Per-Device is already selected; Per-Platform is optional and not required to detect interfaces. B. Incorrect — There is no need to manually create port4 on the ADOM layer; it’s handled by normalization. C. Correct — FortiManager will create normalized interfaces (LAN, Port4, port6) at the ADOM layer during import. D. Partially true, but not the best answer here — it’s more about objects than interfaces, and the question focuses on interface mapping. upvoted 2 times

Selected Answer: C While it is true that if all necessary objects (like interfaces, policies, etc.) are not imported, the FortiGate device may not work as expected, this statement is general and doesn't directly address the specific situation of importing the policy package for the HQ-NGFW-1 device with per platform and per device interfaces. upvoted 4 times

Selected Answer: D Even though the ADOM is in backup (read-only) mode, FortiManager scripts can still be used to directly push configuration commands to the FortiGate device — bypassing the ADOM policy database. upvoted 1 times

Question 3 (Topic 1)

Refer to the exhibit. What can you conclude from the downloaded import report?

Select an option, then click Submit answer.

○ FortiManager does not support per-device mapping for firewall addresses.
○ The administrator will see a new policy package named Remote-FortiGate_root in the FortiManager ADOM database.
○ ortiManager will change the configuration of REMOTE_SUBNET to match the interface mapping coming in from Remote-FortiGate.
○ As a result of this policy import process, FortiManager will create a new firewall address called REMOTE_SUBNET in the ADOM database.

Free FCP-FMG-AD-7-6 – Fortinet FCP-FMG-AD-7-6 Practice Test Question