[Nov 03, 2026] Latest Questions FCP_FGT_AD-7.6 Guide to Prepare Free Practice Tests [Q49-Q67]

NEW QUESTION 49
Refer to the exhibit.

FortiGate has two separate firewall policies for Sales and Engineering to access the same web server with the same security profiles.
Which action must the administrator perform to consolidate the two policies into one?

NEW QUESTION 50
Refer to the exhibits, which show the firewall policy and an antivirus profile configuration.


Why is the user unable to receive a block replacement message when downloading an infected file for the first time?

NEW QUESTION 51
Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.

Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)

NEW QUESTION 52
An employee needs to connect to the office through a high-latency internet connection.
Which SSL VPN setting should the administrator adjust to prevent SSL VPN negotiation failure?

NEW QUESTION 53
What are two features of the NGFW profile-based mode? (Choose two.)

NEW QUESTION 54
Which two statements about the Security Fabric rating are true? (Choose two.)

NEW QUESTION 55
Refer to the exhibits. A web filter profile configuration and firewall policy configuration are shown.
You are trying to access www.facebook.com, but you are redirected to a FortiGuard web filtering block page.
Based on the exhibits, what is the possible cause of the issue?

NEW QUESTION 56
When configuring a FortiGate in a multi-WAN setup, why would an administrator enable session preservation on an interface?

NEW QUESTION 57
Refer to the exhibits. You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits.
Which two factors can you observe from these configurations? (Choose two.)

NEW QUESTION 58
A new administrator is configuring FSSO authentication on FortiGate using DC Agent Mode.
Which step is NOT part of the expected process?

NEW QUESTION 59
Which two statements about the Security Fabric rating are true? (Choose two.)

NEW QUESTION 60
A FortiGate firewall policy is configured with active authentication, however, the user cannot authenticate when accessing a website.
Which protocol must FortiGate allow even though the user cannot authenticate?

NEW QUESTION 61
You have configured an application control profile, set peer-to-peer traffic to Block under the Categories tab, and applied it to the firewall policy. However, your peer-to-peer traffic on known ports is passing through the FortiGate without being blocked. What FortiGate settings should you check to resolve this issue?

NEW QUESTION 62
Refer to the exhibit, which shows a partial configuration from the remote authentication server.

Why does the FortiGate administrator need this configuration?

NEW QUESTION 63
FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively.
Which two statements about the requirements of connected physical interfaces on FortiGate are true? (Choose two.)

NEW QUESTION 64
Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

NEW QUESTION 65
Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects.

The WAN (port2) interface has the IP address 100.65.0.101/24. The LAN (port4) interface has the IP address 10.0.11.254/24. Which IP address will be used to source NAT (SNAT) the traffic, if the user on HQ-PC-1 (10.0.11.50) pings the IP address of BR-FGT (100.65.1.111)

NEW QUESTION 66
Refer to the exhibit. Based on the routing table shown in the exhibit, which two statements are true? (Choose two.)

NEW QUESTION 67
Refer to the exhibit.

Which statement about this firewall policy list is true?