Free Fortinet NSE6_FMG_AD-7.6 Exam Dumps Questions & Answers

A service provider administrator has assigned a global policy package to a managed customer ADOM named My_ADOM. The customer administrator has access only to My_ADOM.
How can the customer administrator edit the global header policy of the global policy package?

• A.The customer administrator can edit the header policy by using workflow mode on the global ADOM and My_ADOM.
• B.The customer administrator can edit the header policy by using workspace mode on the global ADOM.
• C.The customer administrator cannot edit the global header policy; only the service provider administrator can make changes from the global ADOM.
• D.The service provider administrator can unlock the global policy from the global ADOM to authorize changes to the customer administrator.

What can you conclude from the failed installation log shown in the exhibit?

• A.Policy ID 2 will not be installed.
• B.Policy ID 2 is installed without a source address.
• C.Policy ID 2 is installed without the remote user student.
• D.Policy ID 2 is installed in the disabled state.

Refer to the exhibit.

An administrator added a FortiGate device to FortiManager with the default object settings at the ADOM layer.
What can you conclude from the import policy package process of the HQ-NGFW- 1 device?

• A.The administrator must select Per Platform for all interfaces to correctly detect all interfaces from HQ- NGFW-1.
• B.FortiManager will create LAN, port4, and port6 as normalized interfaces at the ADOM layer.
• C.FortiGate may not work as expected when the administrator does not import all objects.
• D.The administrator must manually create the port4 interface on the ADOM layer to avoid import policy errors.

The administrator uses FortiManager to push a CLI script using the Remote FortiGate Directly (via CLI) option to configure an IPsec VPN. However, when running the script, the administrator receives the following error:
config vpn ipsec phase2-interface [parameter(s) invalid. detail: object mismatch] What must the administrator do to resolve the script error and successfully apply the IPsec configuration?

• A.Add the end command after finishing the IPsec phase 1-interface configuration block.
• B.Use IPsec templates to deploy provisioning templates.
• C.Run the script using the policy package or ADOM database method.
• D.Add a second config vpn ipsec phase2-interface block without linking it to phase1.

Refer to the exhibits.


Which IP/netmask will be present in the LAN firewall address object on the Remote-Firewall?

• A.10.0.0.0/255.255.255.0
• B.172.16.10.0/255.255.255.0
• C.172.16.0.0/255.255.255.0
• D.192.168.1.0/255.255.255.0