Free FCP_FGT_AD-7.6 Exam Braindumps
FCP - FortiGate 7.6 Administrator Questions 26–30 (page: 7)

Updated On: 10-Feb-2026

When configuring a FortiGate in a multi-WAN setup, why would an administrator enable session preservation on an interface?

  1. To allow the FortiGate to dynamically change interfaces for all active sessions when a WAN link fails
  2. To make sure all sessions without source NAT enabled always use the primary WAN link
  3. To improve security by forcing users to authenticate again when the WAN link changes
  4. To ensure that existing SSL VPN connections remain on the same interface even if route changes occur

Answer(s): D

Explanation:

Session preservation keeps active sessions, such as SSL VPNs, tied to the original interface to prevent disruption when WAN routes change.



You are analyzing connectivity problems caused by intermediate devices blocking traffic in SSL VPN environment.

In which two ways can you effectively resolve the problem? (Choose two.)

  1. You can turn off IKE fragmentation to fix large certificate negotiation problems.
  2. You should use IPsec to solve issues with fragment drops and large certificate exchanges.
  3. You can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500).
  4. You can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports.

Answer(s): C,D



Refer to the exhibit.



FortiGate has two separate firewall policies for Sales and Engineering to access the same web server with the same security profiles.

Which action must the administrator perform to consolidate the two policies into one?

  1. Create an Aggregate interface that includes port1 and port2 to create a single firewall policy.
  2. Select port1 and port2 subnets in a single firewall policy.
  3. Replace port1 and port2 with the any interface in a single firewall policy.
  4. Enable Multiple Interface Policies to select port1 and port2 in the same firewall policy.

Answer(s): D

Explanation:

Enabling Multiple Interface Policies allows you to select multiple interfaces (like port1 and port2) in a single firewall policy, consolidating access rules for both Sales and Engineering to the web server.



You have configured an application control profile, set peer-to-peer traffic to Block under the Categories tab, and applied it to the firewall policy. However, your peer-to-peer traffic on known ports is passing through the FortiGate without being blocked.

What FortiGate settings should you check to resolve this issue?

  1. FortiGuard category ratings
  2. Application and Filter Overrides
  3. Network Protocol Enforcement
  4. Replacement Messages for UDP-based Applications

Answer(s): B



When configuring firewall policies which of the following is true regarding the policy ID?

  1. It is mandatory to provide a policy ID while creating a firewall policy regardless of GUI or CLI.
  2. A firewall policy ID identifies the order of policy execution in firewall policies.
  3. You can create a policy in CLI with policy ID 0.
  4. A policy ID cannot be edited once a policy is created.

Answer(s): D

Explanation:

Once a firewall policy is created, its policy ID is fixed and cannot be changed; this ID uniquely identifies the policy within the FortiGate configuration.



Viewing page 7 of 27
Viewing questions 31 - 35 out of 128 questions


Post your Comments and Discuss Fortinet FCP_FGT_AD-7.6 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!