Free FCP_FGT_AD-7.6 Exam Braindumps
FCP - FortiGate 7.6 Administrator Questions 36–40 (page: 9)

Updated On: 10-Feb-2026

Refer to the exhibits.



An administrator has observed the performance status outputs on an HA cluster for 55 seconds.

Which FortiGate is the primary?

  1. HQ-NGFW-2 with the parameter memory-failover-threshold setting
  2. HQ-NGFW-2 with the parameter priority setting
  3. HQ-NGFW-1 with the parameter memory-failover-flip-timeout setting
  4. HQ-NGFW-1 with the parameter override setting

Answer(s): A



Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

  1. The collector agent uses a Windows API to query DCs for user logins.
  2. NetAPI polling can increase bandwidth usage in large networks.
  3. The NetSessionEnum function is used to track user logouts.
  4. The collector agent must search Windows application event logs.

Answer(s): C



You have configured the FortiGate device for FSSO. A user is successful in log-in to windows, but their access to the internet is denied.

What should the administrator check first?

  1. Whether the user is assigned to the correct AD group.
  2. The FortiGate firewall policy settings for SSL decryption.
  3. The FortiGate FSSO active users list for user's IP address.
  4. The windows event viewer for failed login attempts.

Answer(s): C

Explanation:

Checking the active users list verifies if FortiGate correctly associates the user with their IP address, ensuring proper policy enforcement for internet access.



What are three key routing principles in SD-WAN? (Choose three.)

  1. By default, SD-WAN rules are skipped if the included SD-WAN members do not have a valid route to the destination.
  2. SD-WAN rules have precedence over any other type of routes.
  3. Regular policy routes have precedence over SD-WAN rules.
  4. By default. SD-WAN rules are skipped if only one route to the destination is available.
  5. By default, SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

Answer(s): A,C,E



Refer to the exhibits.



The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects.

The WAN (port2) interface has the IP address 100.65.0.101/24. The LAN (port4) interface has the IP address 10.0.11.254/24.
Which IP address will be used to source NAT (SNAT) the traffic, if the user on HQ-PC-1 (10.0.11.50) pings the IP address of BR-FGT (100.65.1.111)

  1. 100.65.0.101
  2. 100.65.0.49
  3. 100.65.0.99
  4. 100.65.0.149

Answer(s): C

Explanation:

The ping traffic policy uses the IP pool named SNAT-Remote1, which has the external IP range 100.65.0.99.
Therefore, traffic matching this policy (ping from HQ-PC-1 to BR1-FGT) will use 100.65.0.99 for source NAT.



Viewing page 9 of 27
Viewing questions 41 - 45 out of 128 questions


Post your Comments and Discuss Fortinet FCP_FGT_AD-7.6 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!