Free FCP_FGT_AD-7.6 Exam Braindumps
FCP - FortiGate 7.6 Administrator Questions 31–35 (page: 8)

Updated On: 10-Feb-2026

Which two statements are correct when FortiGate enters conserve mode? (Choose two.)

  1. FortiGate continues to run critical security actions, such as quarantine.
  2. FortiGate refuses to accept configuration changes.
  3. FortiGate halts complete system operation and requires a reboot to regain available resources.
  4. FortiGate continues to transmit packets without IPS inspection when the fail-open global setting in IPS is enabled.

Answer(s): B,D

Explanation:

In conserve mode, FortiGate restricts configuration changes to preserve system stability.
When IPS fail-open is enabled, FortiGate continues forwarding traffic without IPS inspection during resource constraints (conserve mode).



A remote user reports slow SSL VPN performance and frequent disconnections. The user is located in an area with poor internet connectivity.

What setting should the administrator adjust to improve the user's experience?

  1. Enable split tunneling to reduce VPN traffic.
  2. Change the SSL VPN port to a non-standard port.
  3. Increase the session timeout for inactive sessions.
  4. Configure the DTLS timeout to accommodate high-latency connections.

Answer(s): D

Explanation:

Adjusting the DTLS timeout helps maintain SSL VPN stability and performance in environments with poor or high-latency internet connectivity by allowing more time for packet retransmissions before dropping the connection.



An administrator wants to analyze and manage digital certificates to prevent browser warnings when users connect to the SSL VPN portal.

Which two statements describe how to correctly do this? (Choose two.)

  1. The administrator can rely on the default FortiGate self-signed certificate to prevent all security warnings in the browser.
  2. The administrator must disable HTTPS administrative access entirely to avoid certificate warnings.
  3. The administrator can use a publicly trusted certificate from a known certificate authority (CA) to stop browser warnings.
  4. The administrator can import the FortiGate self-signed certificate into each user's browser as a trusted certificate.

Answer(s): C,D

Explanation:

Using a publicly trusted certificate from a known CA prevents browser warnings without additional user action.
Importing the FortiGate self-signed certificate into users' browsers as trusted eliminates warnings caused by untrusted certificates.



An administrator suspects that the Collector Agent is not forwarding login events to FortiGate.

What is the most effective troubleshooting step?

  1. Verify if DC agent is enabled on the FortiGate.
  2. Restart the domain controller to refresh authentication services.
  3. Verify if FortiGate is set to use LDAP authentication instead of FSSO.
  4. Check if TCP port 8000 is open between the collector agent and FortiGate.

Answer(s): D

Explanation:

The Collector Agent communicates with FortiGate over TCP port 8000. Ensuring this port is open and reachable is essential for forwarding login events.



Refer to the exhibit.



A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.

Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)

  1. On BR1-FGT, set Seconds to 43200.
  2. On HQ-NGFW, enable Diffie-Hellman Group 2.
  3. On BR1-FGT, set Remote Address to
    10.0.11.0/255.255.255.0
  4. On HQ-NGFW. set Encryption to AES256

Answer(s): C,D



Viewing page 8 of 27
Viewing questions 36 - 40 out of 128 questions


Post your Comments and Discuss Fortinet FCP_FGT_AD-7.6 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!