Fortinet · FCP_FMG_AD-7.6
Validates the ability to centrally manage multiple FortiGate devices using FortiManager, covering administration, device registration, policy and object management, advanced configuration, and troubleshooting. Designed for network and security analysts responsible for day-to-day management of FortiGate security policies via FortiManager.
Practice Questions
600
≈ 10 practice exams
Duration
70 minutes
Passing Score
Pass/Fail
Difficulty
ProfessionalLast Updated
May 2026
Use this FCP_FMG_AD-7.6 practice exam to prepare for FCP - FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 600 questions for Fortinet FCP_FMG_AD-7.6, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Administration and Initial Configuration, Device Manager and ADOM Management, Policy and Object Management, FortiGuard Services Configuration, and High Availability. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
The FCP – FortiManager 7.6 Administrator (FCP_FMG_AD-7.6) certification validates a professional's ability to centrally manage multiple FortiGate devices using Fortinet's FortiManager platform. The exam tests applied knowledge across the full FortiManager administrative lifecycle, including initial system configuration, administrative domain (ADOM) management, device registration and synchronization, centralized policy and object management, FortiGuard services integration, high availability configuration, logging, reporting, and troubleshooting at both device and system levels. The exam is based on FortiManager 7.6.1 and FortiOS 7.6, ensuring relevance to current production deployments.
This certification is a recognized elective within the Fortinet Certified Professional (FCP) – Network Security track. To earn the FCP – Network Security designation, candidates must pass a core exam (FCP – FortiGate Administrator) plus one elective; FCP_FMG_AD-7.6 fulfills that elective requirement. Effective July 15, 2026, the associated course and exam will transition from the NSE 5 – Secure Networking track to the NSE 6 – Secure Networking track, reflecting its increasing depth and specialization.
This certification is designed for network and security analysts, firewall administrators, and security engineers who are responsible for the day-to-day centralized management of FortiGate security policies and device configurations through FortiManager. It is particularly well-suited to professionals working in environments with multiple FortiGate devices, such as large enterprises, managed service providers (MSPs) managing multiple customer tenants, and organizations with distributed branch deployments.
Candidates typically hold roles such as Network Security Administrator, Security Operations Center (SOC) Analyst, Firewall Engineer, or IT Security Specialist. Those pursuing advancement into senior roles—such as Network Security Architect or Fortinet Consultant—also benefit from this credential as a step toward higher-level Fortinet certification tracks.
There are no formal prerequisites to register for or sit the FCP_FMG_AD-7.6 exam. However, Fortinet strongly recommends that candidates possess prerequisite knowledge of all topics covered in the FortiGate Administrator course, as FortiManager operations are deeply integrated with FortiGate configuration concepts. Hands-on familiarity with FortiGate device administration, security policy management, and basic networking fundamentals (routing, VLANs, firewall rules) is essential for success.
Fortinet's official training recommendation is completion of the FortiManager Administrator instructor-led course (7 lecture hours, 6 lab hours across approximately two days), which covers the exact domains tested in the exam. Candidates with 6–12 months of practical experience managing FortiGate devices in a production environment—particularly those who have worked with centralized management tools—are well-positioned to attempt this exam.
The FCP_FMG_AD-7.6 exam consists of 35 multiple-choice questions to be completed within 70 minutes. Questions are either single-selection or multiple-selection format. Fortinet's scoring policy requires that all selected answers in a multiple-selection question must be correct to receive credit for that question—no partial credit is awarded. Incorrect answers do not incur a score penalty.
The exam is delivered in English and Japanese through Pearson VUE, available at Pearson VUE test centers worldwide as well as via online proctoring (OnVUE) for remote candidates. The exam result is reported as Pass or Fail; no numerical score is disclosed. The exam fee is $200 USD.
Earning the FCP – FortiManager 7.6 Administrator credential positions professionals for roles directly responsible for enterprise-scale network security operations, including Network Security Administrator, Firewall Engineer, SOC Analyst, and MSP Security Engineer. Fortinet holds a leading market share in the network security space, and organizations running Fortinet Security Fabric deployments increasingly require administrators who can operate FortiManager at scale. Certified professionals with Fortinet FCP credentials typically command salaries in the range of $80,000 to $135,000 annually in the United States, depending on experience level and geography, with senior architects and consultants often exceeding those figures.
The FCP_FMG_AD-7.6 is particularly valuable for MSP engineers managing multiple customer environments through FortiManager's multi-ADOM architecture, and for enterprise administrators tasked with consolidating security policy management across distributed branch networks. Compared to vendor-neutral certifications, this credential provides immediate, role-specific validation that hiring managers at Fortinet-centric organizations directly recognize. The certification aligns with the NICE Cybersecurity Workforce Framework, supporting applicability in federal and government-sector hiring contexts.
5 sample questions with answers and explanations. The full bank has 600 questions, enough for 10 full-length practice exams.
Preview — answers shown1. An administrator is comparing FortiManager database operations. Which synchronization operation updates BOTH the Remote Device Database AND the Device Database in FortiManager simultaneously? (Select one!)
Explanation
The Import operation is unique among FortiManager database operations because it updates both the Remote Device Database and the Device Database simultaneously. This makes Import the correct choice when the administrator wants to accept the FortiGate's current running configuration as the new authoritative baseline — effectively telling FortiManager to treat the device's current state as the desired state going forward. The Install operation updates only the Remote Device Database on success after pushing changes to the device; it never modifies the Device Database. The Retrieve operation updates only the Remote Device Database — it pulls the device's current configuration for comparison purposes but intentionally does not modify the Device Database, preserving the administrator's candidate configuration. The Revert operation modifies only the Device Database by restoring it to a historical revision's content; the Remote Device Database is not updated until a subsequent successful install.
2. A Contoso security team uses Global ADOM policy packages to enforce organization-wide mandatory rules across all managed FortiGates. After assigning a global policy package to an ADOM, a network engineer needs to understand the order in which traffic is evaluated on the managed FortiGates. In which order are the policy tiers evaluated when a packet arrives at a managed FortiGate? (Select one!)
Explanation
Global Header policies from the Global ADOM are evaluated first, before any ADOM-specific firewall policies. ADOM-level policies from the assigned policy package are evaluated in the middle tier. Global Footer policies from the Global ADOM are evaluated last, after all ADOM-specific rules but before the implicit deny. This three-tier hierarchy allows Global or Super administrators to define mandatory allow rules at the top (Header) and mandatory catch-all or deny rules at the bottom (Footer), while ADOM administrators manage the policies in between. Header and footer policies are read-only from the ADOM administrator perspective and can only be created or modified by Global or Super admins.
3. A Litware DevOps engineer is writing an automation script to create firewall address objects in FortiManager using the JSON-RPC API. The engineer needs to understand the correct structure of an API request. Which statement correctly describes the required elements of a FortiManager JSON-RPC API request? (Select one!)
Explanation
FortiManager uses JSON-RPC over HTTPS with all requests sent as HTTP POST operations to the /jsonrpc endpoint. A valid request must include three essential elements: the method field specifying the operation type such as get to retrieve objects, set to create or update, add to create only, or exec to run operations; a params array containing at least one object with a url field identifying the specific API resource path; and a session field containing the authentication token obtained from a prior login call. HTTP GET is never used for FortiManager's JSON-RPC API; all requests use HTTP POST regardless of whether the operation reads or writes data. FortiManager does not use XML or SOAP; it exclusively uses the JSON-based JSON-RPC protocol. There is no operation-id header or ADOM-in-Authorization-header mechanism; the target ADOM is specified within the url path inside the params array.
4. An Adatum FortiManager HA cluster consists of a primary running firmware 7.2.4 and a secondary that was recently patched to firmware 7.2.5. An administrator checks HA status and discovers the secondary is not synchronizing with the primary. What is the MOST likely cause of this synchronization failure? (Select one!)
Explanation
FortiManager High Availability requires all cluster members to run exactly the same firmware version. A version mismatch — even between minor patch releases such as 7.2.4 and 7.2.5 — prevents the HA cluster from operating correctly because database schemas, protocol versions, and internal data structures may differ between builds, making reliable synchronization impossible. The cluster rejects membership from nodes running different firmware to protect data integrity. To resolve this issue, the administrator must upgrade all HA members to the same firmware version before the cluster resumes normal synchronization. The standard procedure for upgrading an HA cluster is to upgrade secondary members first while the primary continues managing devices, then upgrade the primary. Although cluster ID mismatch and TCP 5199 blocking are also valid causes of HA failure, the question explicitly describes a firmware version discrepancy between the two nodes, making firmware mismatch the most likely and directly observable cause. License capacity differences affect the cluster's maximum managed device count but do not block HA synchronization.
5. Tailspin's junior administrator proposes enabling set auto-register-device enable on FortiManager to speed up device onboarding. A senior administrator objects. Which statement best justifies keeping this setting disabled in a production environment? (Select one!)
Explanation
When auto-register-device is enabled, any device initiating an FGFM connection on TCP 541 is automatically authorized and added to the managed device inventory without human review. This creates a significant security risk because rogue devices or attackers who can reach the management interface could inject themselves into the management domain. The recommended approach is manual authorization (the default, most secure) or serial number pre-authorization (automated but restricted to known serial numbers). Auto-register-device does not affect TLS encryption or revision history, and the 10-device limitation is a licensing constraint unrelated to auto-registration settings.
Fortinet NSE 7 Network Security Architect—Public Cloud Security
NSE 7 · 600 questions
Fortinet NSE 7 – Network Security Architect (SASE)
NSE7_SAR · 600 questions
Fortinet NSE 7 - Security Operations 7.6 Architect (NSE7_SOC_AR-7.6)
NSE7_SOC_AR-7.6 · 600 questions
FCP – Secure Wireless LAN 7.4 Administrator (FCP_FWF_AD-7.4)
FCP_FWF_AD-7.4 · 600 questions
Fortinet NSE 4 – FortiOS 7.6 Administrator (FOS-ADM-7.6)
FOS-ADM-7.6 · 600 questions
Fortinet NSE 5 - FortiAnalyzer 7.4 Analyst (NSE5_FAZ-7.4)
NSE5_FAZ-7.4 · 597 questions
$17.99
One-time access to this exam