Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Fortinet
Exam Format
90 min
50
Pass/Fail
Professional
Registration
$400 USD
Pearson VUE or online proctoring
English
Validity
2 years
Pass the current version of the FCP - FortiGate Administrator exam; Earn FCP or higher level certifications in any track; Complete Fortinet Continuing Education credits
FCP-FGT-AD-7-6 Exam Topics and Domains
FCP-FGT-AD-7-6 is organized into 7 weighted domains. Expect to work with FortiAnalyzer, FortiGate IPsec VPN, FortiGate logging, FortiGate SD-WAN, and more.
1
Deployment and System Configuration
Initial FortiGate Setup
Initial configuration wizardInterface configuration
- Perform initial FortiGate device setup
- Configure various interface types
- Establish management access to FortiGate
Administrative Access and Security
Administrator accountsTrusted hosts and access control
- Configure administrator accounts with appropriate permissions
- Implement secure administrative access controls
- Configure remote authentication for administrators
High Availability (HA)
FGCP cluster configurationHA troubleshooting
- Set up FGCP High Availability clusters
- Configure HA synchronization and failover
- Troubleshoot HA cluster issues
System Settings and Maintenance
Global system configurationBackup and restoreFirmware management
- Configure global system settings
- Implement backup and restore procedures
- Manage FortiGate firmware updates safely
Fortinet Security Fabric Integration
Security Fabric architectureFabric device integration
- Integrate FortiGate into Fortinet Security Fabric
- Configure Fabric connectors for seamless threat sharing
- Implement automation using Security Fabric
Virtual Domains (VDOMs)
VDOM configuration
- Configure Virtual Domains for multi-tenancy
- Manage VDOM resources and isolation
- Implement inter-VDOM routing
FortiGuard Services
FortiGuard subscription and updates
- Configure FortiGuard subscription services
- Manage security definition updates
- Verify FortiGuard service connectivity
2
Firewall Policies and Authentication
Firewall Policy Configuration
Policy creation and managementAdvanced policy features
- Create and manage firewall policies
- Implement policy-based routing and traffic shaping
- Optimize policy structure for performance
Network Address Translation (NAT)
Source NAT (SNAT)Destination NAT (DNAT) and Virtual IPCentral SNAT and DNAT
- Configure Source NAT and Destination NAT
- Implement Virtual IPs for server publishing
- Use Central SNAT for simplified NAT management
User Authentication and Identity
Local user authenticationRemote authentication serversIdentity-based policies
- Configure local and remote user authentication
- Implement FSSO for transparent authentication
- Create identity-based firewall policies
Traffic Shaping and QoS
Traffic shaping configurationQuality of Service (QoS)
- Configure traffic shaping for bandwidth management
- Implement QoS for application prioritization
- Monitor and verify traffic shaping effectiveness
3
Content Inspection
SSL/SSH Inspection
SSL inspection methods
- Configure SSL/TLS traffic decryption using certificates
- Implement deep inspection for encrypted traffic
- Manage SSL inspection exceptions and troubleshoot issues
Inspection Modes
Flow-based vs. Proxy-based inspection
- Choose between flow-based and proxy-based inspection modes
- Understand feature and performance differences
- Configure inspection mode appropriately for use case
Security Profiles
Antivirus (AV)Web filteringApplication ControlIntrusion Prevention System (IPS)DNS filteringData Loss Prevention (DLP)Email filtering and file filtering
- Configure and manage security profiles (AV, web filtering, application control, IPS)
- Implement content inspection policies with security profiles
- Set up DLP to prevent data exfiltration
Sandboxing Integration
FortiSandbox integration
- Integrate FortiSandbox for advanced threat protection
- Configure sandbox file submission and verdict handling
- Respond to sandbox-detected threats
4
Routing
Static Routing
Static route configuration
- Configure static routing for network connectivity
- Understand route selection based on administrative distance
- Troubleshoot static routing issues
Dynamic Routing
OSPF configurationBGP configurationRIP configuration
- Configure dynamic routing protocols (OSPF, BGP, RIP)
- Understand dynamic route selection and path optimization
- Troubleshoot dynamic routing issues
SD-WAN
SD-WAN zones and membersSD-WAN rules and load balancing
- Configure SD-WAN for intelligent traffic distribution
- Implement link health monitoring and failover
- Optimize WAN performance using SD-WAN rules
Advanced Routing Features
Policy-based routingEqual-Cost Multi-Path (ECMP)
- Implement policy-based routing for advanced traffic control
- Configure ECMP for load balancing
- Design redundant routing architectures
5
VPN Configuration
IPsec VPN
IPsec VPN fundamentalsSite-to-site IPsec VPNHub-and-spoke and mesh VPN
- Configure IPsec VPN site-to-site solutions
- Implement hub-and-spoke and mesh VPN topologies
- Troubleshoot IPsec VPN connectivity
SSL VPN
SSL VPN modesSSL VPN authentication and access
- Deploy SSL VPN for secure remote access
- Configure SSL VPN web mode and tunnel mode
- Customize SSL VPN portals and manage user access
VPN Monitoring and Troubleshooting
VPN diagnostics
- Monitor VPN tunnel status and user sessions
- Troubleshoot VPN connectivity issues using debug tools
- Resolve common IPsec and SSL VPN problems
6
Fortinet Security Fabric (Advanced)
Security Fabric Architecture
Fabric concepts
- Design and implement Security Fabric solutions
- Understand Fabric architecture and device roles
- Leverage Fabric for threat intelligence sharing
Fabric Connectors
Cloud and third-party connectors
- Configure Fabric connectors for cloud integration
- Use dynamic address objects from connectors
- Integrate third-party services into Security Fabric
Automation and Orchestration
Automation stitchesAPI integration
- Implement automation stitches for orchestrated response
- Configure API integration for external automation
- Design automated security workflows
Fabric Device Management
FortiAnalyzer and FortiManager integration
- Integrate FortiGate with FortiAnalyzer for centralized logging
- Integrate with FortiManager for centralized management
- Leverage Fabric for simplified device administration
Security Rating
Security posture assessment
- Use Security Rating to assess security posture
- Implement security hardening based on recommendations
- Verify compliance with best practices
7
Diagnostics and Troubleshooting
Diagnostic Tools
Debug commandsPacket capture (sniffer)
- Use debug commands effectively for troubleshooting
- Perform packet captures to analyze traffic
- Interpret debug and sniffer output
Log Analysis
Log types and interpretationLogging destinations
- Analyze logs to identify issues
- Configure logging destinations
- Use logs for security event investigation
Session and Connection Analysis
Session table
- Analyze the session table for troubleshooting
- Identify and resolve session-related issues
- Monitor session statistics
Performance Monitoring
Resource monitoring
- Monitor FortiGate resource usage
- Identify performance bottlenecks
- Optimize system performance
Common Issues and Resolutions
Troubleshooting methodology
- Apply systematic troubleshooting methodology
- Resolve common FortiGate configuration issues
- Use appropriate diagnostic tools for each issue type
How do I earn this certification?
Passing FCP-FGT-AD-7-6 earns the FCP - Network Security certification. It sits in the Network Security track.
Next Level Options
- NSE 7 - Network Security Architect Architecture and design expertise (choose ONE exam) • Demonstrates ability to design enterprise Fortinet solutions
- NSE 8 - Network Security Expert Highest level of technical certification • Requires extensive hands-on experience and lab demonstration
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for FCP-FGT-AD-7-6 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Last content update: 2024-04-02
- Announcement date: 2024-04-02
Updates
- FortiOS 7.6.5 Exam covers FortiOS 7.6.0 baseline; minor updates in 7.6.x patch releases • Release date: 2024-12-11
- Security Fabric FortiOS 7.6 enhancements Enhanced automation, GenAI integration, and fabric connectors are exam-relevant • Release date: 2024-04-02
- SD-WAN FortiOS 7.6 SD-WAN enhancements AI-driven SD-WAN optimization and advanced traffic steering covered in exam • Release date: 2024-04-02
- Zero Trust Network Access (ZTNA) FortiOS 7.6 ZTNA improvements ZTNA integration with Security Fabric relevant for exam • Release date: 2024-04-02
- FortiAI Native integration in FortiOS 7.6 GenAI-powered threat investigation and automation stitches are new exam topics • Release date: 2024-04-02
Who should take this exam?
This exam is typically taken by Network administrators and Security administrators.
- Understanding of networking concepts (TCP/IP, routing, switching)
- Basic security concepts knowledge
- Completion of FortiGate Operator course or equivalent experience
- Hands-on experience with FortiGate devices