ExamGecko
Login
Home / Fortinet / FCP_FGT_AD-7.4 / List of questions
Ask Question

Fortinet FCP_FGT_AD-7.4 Practice Test - Questions Answers, Page 6

List of questions

Question 51

Report Export Collapse

Refer to the exhibit showing a debug flow output.

Fortinet FCP_FGT_AD-7.4 image Question 51 126270 11122024010310000000

What two conclusions can you make from the debug flow output? (Choose two.)

The debug flow is for ICMP traffic.

The debug flow is for ICMP traffic.

A firewall policy allowed the connection.

A firewall policy allowed the connection.

A new traffic session was created.

A new traffic session was created.

The default route is required to receive a reply.

The default route is required to receive a reply.

Suggested answer: A, C
Explanation:

A - The debug flow is for ICMP traffic.

B . A firewall policy allowed the connection.

C . A new traffic session was created.

D . The default route is required to receive a reply.

The debug flow is for ICMP traffic.

The output shows 'proto=1,' which indicates that the protocol is ICMP (Internet Control Message Protocol).

A new traffic session was created.

The message 'allocate a new session-00003dd5' confirms that a new session was created for this traffic.

asked 12/11/2024
Craig Reid
40 questions

Question 52

Report Export Collapse

Which two statements are correct when FortiGate enters conserve mode? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 53

Report Export Collapse

Refer to the exhibit.

Fortinet FCP_FGT_AD-7.4 image Question 53 126272 11122024010310000000

The administrator configured SD-WAN rules and set the FortiGate traffic log page to display SD-WAN-specific columns: SD-WAN Quality and SD-WAN Rule Name.

FortiGate allows the traffic according to policy ID 1. This is the policy that allows SD-WAN traffic.

Despite these settings the traffic logs do not show the name of the SD-WAN rule used to steer those traffic flows.

What can be the reason?

Become a Premium Member for full access
  Unlock Premium Member

Question 54

Report Export Collapse

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for the example.com home page the override must be configured using a specific syntax.

Which two syntaxes are correct to configure a web rating override for the home page? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 55

Report Export Collapse

An administrator has configured the following settings:

Fortinet FCP_FGT_AD-7.4 image Question 55 126274 11122024010310000000

What are the two results of this configuration? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 56

Report Export Collapse

Which two statements explain antivirus scanning modes? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 57

Report Export Collapse

Refer to the exhibits, which show the firewall policy and the security profile for Facebook.

Fortinet FCP_FGT_AD-7.4 image Question 57 126276 11122024010310000000

Fortinet FCP_FGT_AD-7.4 image Question 57 126276 11122024010310000000

Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.

Which part of the configuration must you change to resolve the issue?

Become a Premium Member for full access
  Unlock Premium Member

Question 58

Report Export Collapse

Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

Become a Premium Member for full access
  Unlock Premium Member

Question 59

Report Export Collapse

A FortiGate administrator is required to reduce the attack surface on the SSL VPN portal.

Which SSL timer can you use to mitigate a denial of service (DoS) attack?

Become a Premium Member for full access
  Unlock Premium Member

Question 60

Report Export Collapse

A FortiGate firewall policy is configured with active authentication however, the user cannot authenticate when accessing a website.

Which protocol must FortiGate allow even though the user cannot authenticate?

Become a Premium Member for full access
  Unlock Premium Member
Total 88 questions
Go to page: of 9
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

A network administrator has configured an SSL/SSH inspection profile defined for full SSL inspection and set with a private CA certificate. The firewall policy that allows the traffic uses this profile for SSL inspection and performs web filtering. When visiting any HTTPS websites, the browser reports certificate warning errors. What is the reason for the certificate warning errors?
Refer to the exhibit. FortiGate is configured for firewall authentication. When attempting to access an external website, the user is not presented with a login prompt. What is the most likely reason for this situation?
Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects. The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IPaddress 10.0.1.254/24. Which IP address will be used to source NAT (SNAT) the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?
A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the and does not block the file allowing it to be downloaded. The administrator confirms that the traffic matches the configured firewall policy. What are two reasons for the failed virus detection by FortiGate? (Choose two.)
Refer to the exhibits, which show the system performance output and the default configuration of high memory usage thresholds in a FortiGate. Based on the system performance output, what can be the two possible outcomes? (Choose two.)
Refer to the exhibits. FGT-1 and FGT-2 are updated with HA configuration commands shown in the exhibit. What would be the expected outcome in the HA cluster?
An administrator configured a FortiGate to act as a collector for agentless polling mode. What must the administrator add to the FortiGate device to retrieve AD user group information?
A network administrator is configuring an IPsec VPN tunnel for a sales employee travelling abroad. Which IPsec Wizard template must the administrator apply?
An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is outbound traffic but no response from the peer. Which DPD mode on FortiGate meets this requirement?
A FortiGate firewall policy is configured with active authentication however, the user cannot authenticate when accessing a website. Which protocol must FortiGate allow even though the user cannot authenticate?