[Aug 20, 2026] New Fortinet FCP_FMG_AD-7.6 Dumps with Test Engine and PDF (New Questions) [Q39-Q63]

Q39. Refer to the exhibit. What are two results from the configuration shown in the exhibit? (Choose two.)

The same administrator can lock more than one ADOM at the same time.

Multiple administrators can lock and work on separate AOMs at the same time.

All changes must be approved before they can be installed on a device.

Concurrent read-write access to an ADOM is disabled.

Q40. Which output is displayed right after moving the ISFW device from one ADOM to another?

Q41. An administrator upgrades FortiManager with workspace mode (per ADOM) enabled to the latest version but notices that the ADOM versions did not change.
Why were the ADOMs not upgraded?

The administrator did not run the database integrity check before performing the upgrade.

FortiManager does not automatically upgrade ADOMs after a firmware upgrade.

A FortiManager process task is stuck and blocking the ADOM upgrade, so the administrator must fix it.

A user had all ADOMs locked before the upgrade, which stopped them from being upgraded.

Q42. Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

When FortiManager installs device-level changes on a managed device

When changes to the device-level database are made on FortiManager

When FortiManager is auto-updated with configuration changes made directly on a managed device

When a provisioning template is assigned to a managed device on the device-level database

Q43. An administrator created a new ADOM named Training for FortiGate devices only. Then, the administrator added the root FortiGate device of a Security Fabric group to the Training ADOM. Which statement correctly describes the expected result for the downstream devices in the Security Fabric, given the actions taken by the administrator? Choose one answer

The downstream devices are automatically authorized.

The downstream devices will appear in the Managed FortiGate section of the root ADOM.

The downstream devices show as unauthorized in the root ADOM.

The downstream devices must be added using the Add Device wizard.

Q44. Which two statements about the integrity of databases on FortiManager are correct? (Choose two.)

Scheduled backups run database integrity commands automatically.

The diagnose dvm check-integritycommand attempts to fix a corrupted file system.

The diagnose cdb check adom-integritycommand can correct issues related to locked devices.

You should fix all database integrity issues before performing a script.

Not following the correct upgrade path may cause inconsistencies in the databases.

Q45. Refer to Exhibit:

An administrator admin used the Configuration Revision History window to revert the FortiGate device configuration to revision ID 6. After running the reinstall policy package, the administrator noticed problems with the firewall policy- they could not see the unset comment on policy ID 1.
Why did FortiManager not remove the comment from policy ID 1 when the administrator ran reinstall policy package?

Because the administrator student must install the configuration changes to correctly see the expected results.

Because the administrator must import the firewall policies to update the firewall policy package.

Because every time the administrator uses the revert config file, they must use the Install Wizard instead of running the reinstall policy package.

Because the administrator used the Revision Diff view, which shows what changed, not what will be installed.

Q46. Refer to the exhibits. An administrator admin used the Configuration Revision History window to revert the FortiGate device configuration to revision ID 6. After running the reinstall policy package, the administrator noticed problems with the firewall policy- they could not see the unset comment on policy ID 1.
Why did FortiManager not remove the comment from policy ID 1 when the administrator ran reinstall policy package?

Because the administrator student must install the configuration changes to correctly see the expected results.

Because the administrator must import the firewall policies to update the firewall policy package.

Because every time the administrator uses the revert configfile, they must use the Install Wizard instead of running the reinstall policy package.

Because the administrator used the Revision Diff view, which shows what changed, not what will be installed.

Q47. Refer to the exhibit. An administrator has created a firewall address object that is used in multiple policy packages for multiple FortiGate devices in an ADOM.

After the installation operation is performed, which IP/netmask will be installed on Remote- Firewall [VDOM1] for the LAN firewall address object?

21.21.2.5/255.255.255.255

172.16.5.20/255.255.255.255

172.16.5.0/255.255.255.0

10.10.10.5/255.255.255.255

Q48. An administrator configures a new BGP peer in the FortiManager device-level database of FortiGate. They reinstall the policy package to the managed FortiGate device without any errors. However, when the administrator logs in to FortiGate, they do not see the BGP configuration changes.
What is the most likely reason why FortiManager did not push the BGP peer changes to FortiGate?

The administrator must use the Install Wizard and select Install device settings only to push BGP settings

Fortigate has a BGP template assigned on the FortiManager database.

The administrator must run a sanity check on FortiManager to make sure the database is not corrupted.

The FortiGate firmware version is different from the FortiManager ADOM version.

Q49. Refer to the exhibit.

If the monitored interface for the primary FortiManager device fails, what must you do to maintain high availability (HA)?

The FortiManager HAfailover is transparent to administrators and does not require any additional action.

Manually promote one of the working secondary devices to the primary role: and reboot the original primary device to remove the peer IP address of the failed device.

Reconfigure the primary device to remove the peer IP address of the failed device from its configuration.

Check the integrity database of the primary device to force a secondary device to become the new primary with all active interfaces.

Q50. A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM.
How can the customer administrator edit the global header policy of the global policy package?

The customer administrator can edit the header policy by using workspace mode on the global ADOM.

The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.

The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.

The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.

Q51. Refer to the exhibit. What are two results from the configuration shown in the exhibit? (Choose two.)

Ungraceful closed sessions will keep the ADOM in a locked state until the administrator session times out.

The administrator can lock policy blocks and FortiManager global ADOM.

The same administrator can lock more than one ADOM at the same time.

The administrator must have access to the ADOM to approve changes.

Q52. Refer to the exhibit.

How does FortiManager get antivirus and IPS updates? Choose one answer

It uses all URLs in the list that contain the fds host name.

It gets updates from the server with IP address 10.0.1.50.

It connects to all servers marked as FortiGuard Distribution Network through Internet FDNI sources.

It connects to the public FortiGuard servers listed in the configuration

Q53. What is the purpose of ADOM revisions?

ADOM revisions find unused, duplicate, and unnecessary firewall policies and objects.

ADOM revisions show specific changes in a policy package when it is installed.

ADOM revisions compare previous snapshots of the Policy Package and ADOM-level objects with the device-level database.

ADOM revisions save the current state of all policy packages and objects for an ADOM.

Q54. Which output is displayed right after moving the ISFW device from one ADOM to another?

Q55. What are two expected results when both FortiManager and FortiGate are behind network address translation (NAT) devices? (Choose two.)

During discovery, the FortiManager NATed IP address is not set by default on FortiGate.

FortiGate is discovered by FortiManager through the FortiGate NATed IP address.

If the FortiGate-FortiManager communication protocol (FGFM) tunnel is torn down, FortiManager will try to reestablish the FGFM tunnel.

FortiGate can announce itself to FortiManager only if the FortiManager non-NATed IP address is configured on FortiGate under central management.

Q56. Refer to the exhibits.

An administrator needs to push a FortiToken Mobile to assign it to HR_user in the HQ-NGFW-1.
However, when installing the policy package, they receive the following error message:

Why is the administratornotable to install the FortiToken on the HQ-NGFW-1 firewall?

The administrator must use a user local meta field to assign FortiToken.

The administrator must use a valid FortiToken that exists on HQ-NGFW-1.

The administrator must use a metadata variable to assign the same FortiToken to multiple users in FortiManager.

The administrator must use per-device mapping to assign the FortiToken to HQ-NGFW-1.

Q57. Refer to the exhibit.

What are two results from the configuration shown in the exhibit? Choose two answers.

The same administrator can lock more than one ADOM at the same time.

Multiple administrators can lock and work on separate ADOMs at the same time.

All changes must be approved before they can be installed on a device.

Concurrent read-write access to an ADOM is disabled.

Q58. An administrator wants to configure and manage multiple objects in the FortiManager database and give access to other users who work in the same database. To stay in control of the changes made to firewall policies by other team members, the administrator needs a setup where all modifications go through a central check before they can be installed.
How can the administrator create this setup?

Enable the prompt asking the administrator to accept firewall policies changes before saving.

Enable the workspace (for all ADOMs) to control all changes made by any administrator.

Enable device lock and the advanced mode feature in the ADOM.

Enable workflow mode and the ADOM lock feature.

Q59. You are moving managed FortiGate devices from one ADOM to a new ADOM.
Which statement correctly describes the expected result?

The shared device settings will be installed automatically.

The shared policy package will not be moved to the new ADOM automatically.

Any unused objects from a previous ADOM are moved to the new ADOM automatically.

Policy packages will be imported into the new ADOM automatically.

Q60. An administrator receives the import report after importing policies into the policy package layer.

Based on the import report, how did FortiManager handle the profile-protocol-options object named default?

FortiManager deleted the duplicate value from its database.

FortiManager created a new service category in its database.

FortiManager did not update its database with the value.

FortiManager updated the duplicate value in the FortiGate database.

Q61. Refer to the exhibits. An administrator added BR1-FGT-1 to FortiManager and started importing the policy package. During the process, they saw that they need to choose values from FortiGate or FortiManager.
Which conclusion is most clearly supported by the exhibits?

BR1-FGT-1 does not support the SSL/SSH profile with HTTPS on port 443.

The administrator must match the FortiOS firmware version with the FortiManager ADOM firmware version to resolve the conflict status.

The default Firewall Profile-Protocol-Options object is the only profile that does not significantly affect any configuration changes on either FortiManager or FortiGate.

FortiManager has a different FortiGuard database compared to FortiGate BR1-FGT-1 for the QUIC protocol.

Q62. An administrator sees that the policy package status of HQ-NGFW-1 is Never Installed.
What can you conclude from this status?

The policy package was never imported to the revision history after HQ-NGFW-1 was registered on FortiManager.

The policies have not yet been retrieved from the HQ-NGFW-1 device-level database of FortiManager.

The firewall policies exist only in the HQ-NGFW-1 device-level database, and no policy package has been assigned to the firewall.

The firewall policies were created or changed in the ADOM, and they need to be installed on the managed HQ-NGFW-1 for the first time.

Q63. Refer to the exhibits.

An administrator needs to push a FortiToken Mobile to assign it to HR_user in the HQ-NGFW-1.
However, when installing the policy package, they receive the following error message:

Why is the administrator not able to install the FortiToken on the HQ-NGFW-1 firewall?