Fortinet FCP_FMG_AD-7.6 Practice Test 17

Question 160

The team configured ADOM workspace lock for the purpose to prevent conflicting concurrent changes across a shared ADOM during an approved change. What verified state indicates success?

Edits are permitted for the lock owner and unavailable to other administrators
The lock owner and element are visible for a controlled handoff
One package is editable to its holder while another remains available independently
Session status records submitted changes and the approving actor

Explanation

Correct Answer

The resulting evidence is specific to ADOM workspace lock: edits are permitted for the lock owner and unavailable to other administrators. It demonstrates the requirement to prevent conflicting concurrent changes across a shared ADOM during an approved change, rather than merely showing a configuration record was saved.

Incorrect Answers

This result would help verify Session and lock ownership monitoring and its different task to identify which operator prevents an urgent ADOM edit. It does not establish that the requested ADOM workspace lock outcome has been achieved.

This result would help verify Individual policy-package lock and its different task to let administrators safely edit different packages within one ADOM. It does not establish that the requested ADOM workspace lock outcome has been achieved.

This result would help verify Workflow change session and its different task to require submitted approval before a policy change moves through team controls. It does not establish that the requested ADOM workspace lock outcome has been achieved.

Question 161

After configuring Device-level script target to avoid applying a chassis-specific command across unrelated firewalls, an administrator observes an unexpected outcome. Which check should be prioritized?

Inspect time settings and schedule status if the job never starts
Compare device revisions to isolate the script-added configuration
Check chosen targets and device access if a neighbor gateway receives the command
Read script execution errors and firmware command compatibility on failure

Explanation

Correct Answer

This is the focused troubleshooting check for Device-level script target: check chosen targets and device access if a neighbor gateway receives the command. It tests the failure most relevant to the goal to avoid applying a chassis-specific command across unrelated firewalls before unrelated settings are changed.

Incorrect Answers

That check is relevant to a fault in Scheduled CLI script execution used to run a permitted maintenance command during an approved window. It does not directly isolate the described Device-level script target failure to avoid applying a chassis-specific command across unrelated firewalls.

That check is relevant to a fault in Post-script revision recovery used to recover after a script created an unintended device setting. It does not directly isolate the described Device-level script target failure to avoid applying a chassis-specific command across unrelated firewalls.

That check is relevant to a fault in FortiManager CLI script used to automate a repeatable command change on selected managed devices. It does not directly isolate the described Device-level script target failure to avoid applying a chassis-specific command across unrelated firewalls.

Question 162

The team expects HA primary role priority observation to check which node is expected to become primary under a supported HA configuration, but acceptance testing fails. Which diagnostic step best addresses this mechanism?

Examine cluster election state when assumed priority differs from actual role
Compare member firmware when onboarding enforces a version unexpectedly
Inspect cluster discovery state if only a primary member is listed
Inspect member serial and priority when devices appear standalone

Explanation

Correct Answer

This is the focused troubleshooting check for HA primary role priority observation: examine cluster election state when assumed priority differs from actual role. It tests the failure most relevant to the goal to check which node is expected to become primary under a supported HA configuration before unrelated settings are changed.

Incorrect Answers

That check is relevant to a fault in HA cluster firmware consistency used to keep cluster registration from triggering a version conflict. It does not directly isolate the described HA primary role priority observation failure to check which node is expected to become primary under a supported HA configuration.

That check is relevant to a fault in FortiGate HA member role view used to determine primary versus secondary members of a centrally managed firewall cluster. It does not directly isolate the described HA primary role priority observation failure to check which node is expected to become primary under a supported HA configuration.

That check is relevant to a fault in HA cluster model device entry used to prepare cluster inventory before both managed firewalls are online. It does not directly isolate the described HA primary role priority observation failure to check which node is expected to become primary under a supported HA configuration.

Question 163

An administrator states that Install task scheduling now allows them to schedule a coordinated configuration window rather than immediately pushing a change. Which check provides the strongest supporting evidence?

Preview lists the expected command changes before execution
The job history shows selected package and device changes applied
Installation job starts at the approved future time
Device installation result reports updated device settings on the target

Explanation

Correct Answer

The resulting evidence is specific to Install task scheduling: installation job starts at the approved future time. It demonstrates the requirement to schedule a coordinated configuration window rather than immediately pushing a change, rather than merely showing a configuration record was saved.

Incorrect Answers

This result would help verify Installation preview for device changes and its different task to inspect the exact CLI effect of a proposed settings change before rollout. It does not establish that the requested Install task scheduling outcome has been achieved.

This result would help verify Install Wizard policy and device selection and its different task to send both a policy package and associated device settings in one controlled deployment. It does not establish that the requested Install task scheduling outcome has been achieved.

This result would help verify Device settings installation and its different task to deploy centrally edited interface or routing settings to a selected managed FortiGate. It does not establish that the requested Install task scheduling outcome has been achieved.

Question 164

A FortiManager incident involves Add Device wizard for an online FortiGate: the team cannot enroll a reachable firewall into centralized management. What targeted troubleshooting check is appropriate?

Review the FortiGate configured manager address and pending authorization state
Inspect both member firmware and cluster identity when only one member appears
Check that model details match the actual later serial and platform
Inspect reachability and authorization when discovery succeeds but registration does not

Explanation

Correct Answer

This is the focused troubleshooting check for Add Device wizard for an online FortiGate: inspect reachability and authorization when discovery succeeds but registration does not. It tests the failure most relevant to the goal to enroll a reachable firewall into centralized management before unrelated settings are changed.

Incorrect Answers

That check is relevant to a fault in FortiGate-initiated management request used to approve a firewall that connects to FortiManager seeking central management. It does not directly isolate the described Add Device wizard for an online FortiGate failure to enroll a reachable firewall into centralized management.

That check is relevant to a fault in FortiGate HA cluster device registration used to manage a FortiGate cluster with both members represented centrally. It does not directly isolate the described Add Device wizard for an online FortiGate failure to enroll a reachable firewall into centralized management.

That check is relevant to a fault in Offline model device registration used to prepare central policy and device settings for hardware not yet connected. It does not directly isolate the described Add Device wizard for an online FortiGate failure to enroll a reachable firewall into centralized management.

Question 165

A centralized security team is assigned to manage a FortiGate cluster with both members represented centrally. Which FortiManager approach should be selected?

Offline model device registration
FortiGate HA cluster device registration
FortiGate-initiated management request
Add Device wizard for an online FortiGate

Explanation

Correct Answer

FortiGate HA cluster device registration fits this operational requirement: manage a FortiGate cluster with both members represented centrally. The implementation begins by ensuring that administrators register supported cluster members with compatible firmware and cluster information; success is confirmed when Device Manager shows cluster roles and synchronization status.

Incorrect Answers

Offline model device registration is suited to a different task: prepare central policy and device settings for hardware not yet connected. It does not directly meet the specified goal to manage a FortiGate cluster with both members represented centrally; selecting it would address a different management function.

FortiGate-initiated management request is suited to a different task: approve a firewall that connects to FortiManager seeking central management. It does not directly meet the specified goal to manage a FortiGate cluster with both members represented centrally; selecting it would address a different management function.

Add Device wizard for an online FortiGate is suited to a different task: enroll a reachable firewall into centralized management. It does not directly meet the specified goal to manage a FortiGate cluster with both members represented centrally; selecting it would address a different management function.

Question 166

During a branch management project, the primary requirement is to reassign one FortiGate's management ownership to a different customer context. What is the most appropriate FortiManager control?

Compare ADOM revision differences
Restore a known-good ADOM revision
Moving managed device between ADOMs
Create ADOM revision before change

Explanation

Correct Answer

Moving managed device between ADOMs fits this operational requirement: reassign one FortiGate's management ownership to a different customer context. The implementation begins by ensuring that administrators use supported transfer workflow and plan destination package import or rebuilding; success is confirmed when target ADOM contains the moved device and approved package objects.

Incorrect Answers

Compare ADOM revision differences is suited to a different task: identify which shared object or policy changed between two central baselines. It does not directly meet the specified goal to reassign one FortiGate's management ownership to a different customer context; selecting it would address a different management function.

Restore a known-good ADOM revision is suited to a different task: reverse an unauthorized central policy edit using saved revision state. It does not directly meet the specified goal to reassign one FortiGate's management ownership to a different customer context; selecting it would address a different management function.

Create ADOM revision before change is suited to a different task: preserve central policy and object definitions ahead of risky edits. It does not directly meet the specified goal to reassign one FortiGate's management ownership to a different customer context; selecting it would address a different management function.

Question 167

A FortiManager incident involves Firewall policy rule creation: the team cannot create an explicit allow or deny rule for defined source and destination traffic. What targeted troubleshooting check is appropriate?

Inspect ADOM version and feature visibility if a control is absent
Check shadowing rules when a new exception never matches traffic
Review object mappings if the rule compiles to unexpected values
Inspect the selected package if the section appears in the wrong policy list

Explanation

Correct Answer

This is the focused troubleshooting check for Firewall policy rule creation: review object mappings if the rule compiles to unexpected values. It tests the failure most relevant to the goal to create an explicit allow or deny rule for defined source and destination traffic before unrelated settings are changed.

Incorrect Answers

That check is relevant to a fault in Policy feature visibility used to expose a supported rule feature needed by an administrator. It does not directly isolate the described Firewall policy rule creation failure to create an explicit allow or deny rule for defined source and destination traffic.

That check is relevant to a fault in Firewall policy sequence order used to ensure a specific exception is evaluated ahead of a broader matching rule. It does not directly isolate the described Firewall policy rule creation failure to create an explicit allow or deny rule for defined source and destination traffic.

That check is relevant to a fault in Policy section grouping used to make a large policy list easier to maintain and review. It does not directly isolate the described Firewall policy rule creation failure to create an explicit allow or deny rule for defined source and destination traffic.

Question 168

A FortiManager team implemented FortiManager primary and secondary roles to provide a recoverable manager control plane using a primary appliance and backup units. Which observed outcome most directly proves the change works?

The promoted appliance advertises Primary role and managed communication resumes
HA role transfer occurs under the designated failure test without manual secondary promotion
The HA status page shows the intended primary and secondary units as cluster members
The expected peer heartbeat is received and cluster status is Up

Explanation

Correct Answer

The resulting evidence is specific to FortiManager primary and secondary roles: the HA status page shows the intended primary and secondary units as cluster members. It demonstrates the requirement to provide a recoverable manager control plane using a primary appliance and backup units, rather than merely showing a configuration record was saved.

Incorrect Answers

This result would help verify FortiManager manual HA takeover and its different task to recover manager operations after primary failure where manual failover is configured. It does not establish that the requested FortiManager primary and secondary roles outcome has been achieved.

This result would help verify FortiManager automatic HA failover mode and its different task to use the supported automatic VRRP-based failover behavior rather than a manual promotion process. It does not establish that the requested FortiManager primary and secondary roles outcome has been achieved.

This result would help verify FortiManager HA heartbeat state and its different task to determine whether the HA backup has lost contact with the primary. It does not establish that the requested FortiManager primary and secondary roles outcome has been achieved.

Question 169

A proposal relies on Normalized interface missing-map alert to identify an install failure caused by an unmapped policy interface. Which caveat belongs to that exact FortiManager function?

Mapping faults are not corrected by refreshing FortiGuard signatures
Mapping only translates logical references; it does not alter routing by itself
Changing a normalized-interface mapping can affect multiple policies referencing it
Normalized interfaces are management abstractions and do not create FortiGate network interfaces

Explanation

Correct Answer

The stated scope boundary specifically qualifies Normalized interface missing-map alert: mapping faults are not corrected by refreshing FortiGuard signatures. The control is appropriate for the operational need to identify an install failure caused by an unmapped policy interface, but should not be credited with unrelated behavior.

Incorrect Answers

That caveat describes Per-device interface mapping in a different management scenario, which addresses install common rules across sites whose WAN links use different physical ports. It is not the specific limitation of Normalized interface missing-map alert requested in this design review.

That caveat describes Interface-mapping changes and revision control in a different management scenario, which addresses preserve a tested site's port mapping through a centralized policy update. It is not the specific limitation of Normalized interface missing-map alert requested in this design review.

That caveat describes Normalized interface for shared policy in a different management scenario, which addresses use one logical interface name across FortiGates with different physical port names. It is not the specific limitation of Normalized interface missing-map alert requested in this design review.

Question 170

A FortiManager 7.6 administrator needs to maintain locally available AV and IPS update content for managed devices. Which named management mechanism most directly meets this need?

FortiGuard antivirus and IPS package download
Local FDS VM subscription eligibility check
Closed-network FDS package import
FortiGuard rating-service override

Explanation

Correct Answer

FortiGuard antivirus and IPS package download fits this operational requirement: maintain locally available AV and IPS update content for managed devices. The implementation begins by ensuring that administrators enable the supported FortiGuard antivirus and IPS services and synchronize packages from FDN; success is confirmed when the local package inventory shows expected newer update content.

Incorrect Answers

Local FDS VM subscription eligibility check is suited to a different task: recognize why a trial FortiManager VM cannot function as a paid local FortiGuard distribution server. It does not directly meet the specified goal to maintain locally available AV and IPS update content for managed devices; selecting it would address a different management function.

Closed-network FDS package import is suited to a different task: keep a supported isolated FortiManager update environment functional without direct Internet FDN connectivity. It does not directly meet the specified goal to maintain locally available AV and IPS update content for managed devices; selecting it would address a different management function.

FortiGuard rating-service override is suited to a different task: steer supported FortiGate rating lookups toward a centrally hosted local FortiManager endpoint. It does not directly meet the specified goal to maintain locally available AV and IPS update content for managed devices; selecting it would address a different management function.

Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests

Fortinet FCP_FMG_AD-7.6 Practice Test 15 - 10 Questions (Last Reviewed 22-Oct-2026)
Fortinet FCP_FMG_AD-7.6 Practice Test 16 - 10 Questions (Last Reviewed 21-Oct-2026)
Fortinet FCP_FMG_AD-7.6 Practice Test 17 - 10 Questions (Last Reviewed 20-Oct-2026)
Fortinet FCP_FMG_AD-7.6 Practice Test 18 - 10 Questions (Last Reviewed 19-Oct-2026)
Fortinet FCP_FMG_AD-7.6 Practice Test 19 - 10 Questions (Last Reviewed 18-Oct-2026)

Pass Your Fortinet FCP_FMG_AD-7.6 Exam Easy!

Question 160

Explanation

Correct Answer

Incorrect Answers

Question 161

Explanation

Correct Answer

Incorrect Answers

Question 162

Explanation

Correct Answer

Incorrect Answers

Question 163

Explanation

Correct Answer

Incorrect Answers

Question 164

Explanation

Correct Answer

Incorrect Answers

Question 165

Explanation

Correct Answer

Incorrect Answers

Question 166

Explanation

Correct Answer

Incorrect Answers

Question 167

Explanation

Correct Answer

Incorrect Answers

Question 168

Explanation

Correct Answer

Incorrect Answers

Question 169

Explanation

Correct Answer

Incorrect Answers

Question 170

Explanation

Correct Answer

Incorrect Answers

Fortinet NSE 5 - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) Practice Tests