Home / Fortinet / FCP_FGT_AD-7.4

Fortinet FCP_FGT_AD-7.4 Practice Test - Questions Answers, Page 3

Question list

List of questions

Question 21

(0)

Which three strategies are valid SD-WAN rule strategies for member selection? (Choose three.)

Question 22

(0)

Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

Question 23

(0)

Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)

Question 24

(0)

What are two features of the NGFW profile-based mode? (Choose two.)

Question 25

(0)

Refer to the exhibit to view the firewall policy. Why would the firewall policy not block a well-known virus, for example eicar?

Question 26

(0)

Which inspection mode does FortiGate use for application profiles if it is configured as a profile-based next-generation firewall (NGFW)?

Question 27

(0)

Refer to the exhibit showing a FortiGuard connection debug output. Based on the output, which two facts does the administrator know about the FortiGuard connection? (Choose two.)

Question 28

(0)

Refer to the exhibit. Why did FortiGate drop the packet?

Question 29

(0)

An administrator must enable a DHCP server on one of the directly connected networks on FortiGate. However, the administrator is unable to complete the process on the GUI to enable the service on th

Question 30

(0)

Refer to the exhibit. Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit. What do you conclude when adding the FTP.Login.Failed signature to th

Related questions

Refer to the exhibits. FGT-1 and FGT-2 are updated with HA configuration commands shown in the exhibit. What would be the expected outcome in the HA cluster?

Which three methods are used by the collector agent for AD polling? (Choose three.)

Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, and the firewall configuration. An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2. The policy should work such that Remote-User1 must be able to access the Webserver while preventing Remote-User2 from accessing the Webserver. Which two configuration changes can the administrator make to the policy to deny Webserver access for Remote-User2? (Choose two.)

Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true? (Choose two.)

Refer to the exhibit, which shows a partial configuration from the remote authentication server. Why does the FortiGate administrator need this configuration?

An administrator configured a FortiGate to act as a collector for agentless polling mode. What must the administrator add to the FortiGate device to retrieve AD user group information?

Which three strategies are valid SD-WAN rule strategies for member selection? (Choose three.)

A network administrator is configuring an IPsec VPN tunnel for a sales employee travelling abroad. Which IPsec Wizard template must the administrator apply?

A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes. All traffic must be routed through the primary tunnel when both tunnels are up. The secondary tunnel must be used only if the primary tunnel goes down. In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover. Which two key configuration changes must the administrator make on FortiGate to meet the requirements? (Choose two.)

Which method allows management access to the FortiGate CLI without network connectivity?

Question 21

Which three strategies are valid SD-WAN rule strategies for member selection? (Choose three.)

Manual with load balancing

Lowest Cost (SLA) with load balancing

Best Quality with load balancing

Lowest Quality (SLA) with load balancing

Lowest Cost (SLA) without load balancing

Show Answer Comment (0)

Question 22

Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

Pre-shared key and certificate signature as authentication methods

Extended authentication (XAuth)to request the remote peer to provide a username and password

Extended authentication (XAuth) for faster authentication because fewer packets are exchanged

No certificate is required on the remote peer when you set the certificate signature as the authentication method

Show Answer Comment (0)

Question 23

Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)

Checksums of devices are compared against each other to ensure configurations are the same.

Incremental configuration synchronization can occur only from changes made on the primary FortiGate device.

Incremental configuration synchronization can occur from changes made on any FortiGate device within the HA cluster

Checksums of devices will be different from each other because some configuration items are not synced to other HA members.

Show Answer Comment (0)

Question 24

What are two features of the NGFW profile-based mode? (Choose two.)

NGFW profile-based mode can only be applied globally and not on individual VDOMs.

NGFW profile-based mode must require the use of central source NAT policy

NGFW profile-based mode policies support both flow inspection and proxy inspection.

NGFW profile-based mode supports applying applications and web filtering profiles in a firewall policy.

Show Answer Comment (0)

Question 25

Refer to the exhibit to view the firewall policy.

Why would the firewall policy not block a well-known virus, for example eicar?

The action on the firewall policy is not set to deny.

The firewall policy is not configured in proxy-based inspection mode.

Web filter is not enabled on the firewall policy to complement the antivirus profile.

The firewall policy does not apply deep content inspection.

Show Answer Comment (0)

Question 26

Which inspection mode does FortiGate use for application profiles if it is configured as a profile-based next-generation firewall (NGFW)?

Full content inspection

Proxy-based inspection

Certificate inspection

Flow-based inspection

Show Answer Comment (0)

Question 27

Refer to the exhibit showing a FortiGuard connection debug output.

Based on the output, which two facts does the administrator know about the FortiGuard connection? (Choose two.)

One server was contacted to retrieve the contract information.

There is at least one server that lost packets consecutively.

A local FortiManaqer is one of the servers FortiGate communicates with.

FortiGate is using default FortiGuard communication settings.

Show Answer Comment (0)

Question 28

Refer to the exhibit.

Why did FortiGate drop the packet?

11 matched an explicitly configured firewall policy with the action DENY

It failed the RPF check.

The next-hop IP address is unreachable.

It matched the default implicit firewall policy

Show Answer Comment (0)

An administrator must enable a DHCP server on one of the directly connected networks on FortiGate. However, the administrator is unable to complete the process on the GUI to enable the service on the interface.

In this scenario, what prevents the administrator from enabling DHCP service?

The role of the interface prevents setting a DHCP server.

The DHCP server setting is available only on the CLI.

Another interface is configured as the only DHCP server on FortiGate.

The FortiGate model does not support the DHCP server.

Show Answer Comment (0)

Question 30

Refer to the exhibit.

Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit.

What do you conclude when adding the FTP.Login.Failed signature to the IPS sensor profile?

Traffic matching the signature will be allowed and logged.

The signature setting uses a custom rating threshold.

The signature setting includes a group of other signatures.

Traffic matching the signature will be silently dropped and logged.

Show Answer Comment (0)

Total 86 questions

1 2 3 4 5

Go to page: of 9