高通過率的FCP_FMG_AD-7.6信息資訊 |第一次嘗試輕鬆學習並通過考試，優秀的FCP_FMG_AD-7.6：FCP - FortiManager 7.6 AdministratorFast2test有最新的Fortinet FCP_FMG_AD-7.6 認證考試的培訓資料，Fast2test的一些勤勞的IT專家通過自己的專業知識和經驗不斷地推出最新的Fortinet FCP_FMG_AD-7.6的培訓資料來方便通過Fortinet FCP_FMG_AD-7.6的IT專業人士。Fortinet FCP_FMG_AD-7.6的認證證書在IT行業中越來越有份量，報考的人越來越多了，很多人就是使用Fast2test的產品通過Fortinet FCP_FMG_AD-7.6認證考試的。通過這些使用過產品的人的回饋，證明我們的Fast2test的產品是值得信賴的。 最新的 Fortinet Network Security Expert FCP_FMG_AD-7.6 免費考試真題 (Q61-Q66):問題 #61
After correcting a policy package configuration issue, you want to prevent administrators from repeating the mistake that caused the issue.
Which FortiManager approach best meets this need?
A. Configure an TCL script to run locally on FortiManager for each FortiGate.
B. Enable the change note to require administrators to add a note whenever they change object configurations.
C. Enable a workflow requiring approval before installing policy packages on any FortiGate.
D. Restrict administrators with an administration profile from viewing the revision history to limit who can make changes.
答案：C
解題說明：
Enabling a workflow with approval ensures that any policy package changes must be reviewed and approved before installation, preventing administrators from repeating configuration mistakes and enforcing change control.
問題 #62
Refer to the exhibit. A junior administrator is troubleshooting a FortiManager connectivity issue that is occurring with a managed FortiGate device.
Given the FortiManager device manager settings shown in the exhibit, what can you conclude from this scenario?
A. The administrator recently restored a FortiManager configuration file.
B. The administrator can reclaim the FortiGate to FortiManager protocol (FGFM) tunnel to get the device online.
C. The administrator must refresh the device to restore connectivity.
D. FortiManager lost internet connectivity, therefore, the device appears to be down.
答案：A
解題說明：
FMG is in offline mode, which is activated after restoring a configuration file.
問題 #63
A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM. How can the customer administrator edit the global header policy of the global policy package?
A. The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.
B. The customer administrator can edit the header policy by using workspace mode on the global ADOM.
C. The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.
D. The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.
答案：D
解題說明：
The global policy package is managed only from the global ADOM by the service provider administrator. Customer administrators with access solely to their ADOM (My_ADOM) cannot edit the global header policy; such changes must be made by the service provider administrator in the global ADOM.
問題 #64
Refer to the exhibit.
Which two statements about the output are true? (Choose two.)
A. The system template default will override device-level database configurations.
B. The latest revision history for the managed FortiGate does not match the device-level database.
C. Configuration changes have been installed on FortiGate, updating policy and device-level database.
D. The latest revision history for the managed FortiGate does match the FortiManager policy database.
答案：A,B
解題說明：
The status "pending" indicates the latest revision history does not match the device-level database, meaning there are unapplied changes.
The template is marked as [modified], so the system template default will override device-level database configurations when installed.
問題 #65
Refer to the exhibit. An administrator assigned a new policy package to FortiGate HQ-NGFW-1.
In the installation preview, they noticed some settings they did not modify and are unsure about the changes.
Based on the exhibit, which two things will happen if they continue with the installation? (Choose two.)
A. FortiGate HQ-NGFW-1 will use the root_CA3 certificate in firewall address objects or policies.
B. FortiManager will install the CA certificate named root_CA3 to authenticate FortiGate-to- FortiManager communication protocol (FGFM) tunnel connections with FortiGate HQ- NGFW-1.
C. FortiGate HQ-NGFW-1 can contact the FortiManager acting as FortiGuard Distribution Server (FDS) to download FortiGuard updates.
D. FortiGate HQ-NGFW-1 can use FortiManager firmware templates to upgrade firmware and ratings.
答案：B,C
解題說明：
The configuration includes a server-list with server-type set to "update rating," which enables FortiGate HQ-NGFW-1 to contact FortiManager as a FortiGuard Distribution Server (FDS) for FortiGuard updates.
The installation includes a root_CA3 certificate, which FortiManager will install on FortiGate HQ- NGFW-1 to authenticate FGFM tunnel connections between the devices.
