Question 61 · 89 in bank
Select 2Which two statements are true about the FGCP protocol? (Choose two.)
Show answer
Answer: BD
FCP_FGT_AD-7.4ProfessionalFortinetAll questions freePage 7 of 9
FCP_FGT_AD-7.4 practice questions 61–70
FCP — FortiGate 7.4 Administrator89 questions across 9 pages are complete and free, with no account or card.
Official study references
89 questions in this bank
Free access · progress saved on this device
Question 62 · 89 in bank
Refer to the exhibit which contains a RADIUS server configuration.
An administrator added a configuration for a new RADIUS server. While configuring, the administrator selected the Include in every user group option. What is the impact of using the Include in every user group option in a RADIUS configuration?
Show answer
Answer: A
Question 63 · 89 in bank
Which statement about the deployment of the Security Fabric in a multi-VDOM environment is true?
Show answer
Answer: C
Explanation
FortiGate Security 7.2 Study Guide (p.436): "When you configure FortiGate devices in multi-vdom mode and add them to the Security Fabric, each VDOM with its assigned ports is displayed when one or more devices are detected. Only the ports with discovered and connected devices appear in the Security Fabric view and, because of this, you must enable Device Detection on ports you want to have displayed in the Security Fabric. VDOMs without ports with connected devices are not displayed. All VDOMs configured must be part of a single Security Fabric."
Source: Adapted from community discussion — f3eb371
Question 64 · 89 in bank
Refer to the exhibit.
The administrator configured SD-WAN rules and set the FortiGate traffic log page to display SD-WAN-specific columns: SD-WAN Quality and SD-WAN Rule Name. FortiGate allows the traffic according to policy ID 1. This is the policy that allows SD-WAN traffic. Despite these settings the traffic logs do not show the name of the SD-WAN rule used to steer those traffic flows. What can be the reason?
Show answer
Answer: A
Explanation
If no SD-WAN rule appear is because there is no traffic matching them, and the traffic logged is being handled by the implicit SD-WAN rule
Source: Adapted from community discussion — sxcap
Question 65 · 89 in bank
Select 2FortiGuard categories can be overridden and defined in different categories. To create a web rating override for the example.com home page the override must be configured using a specific syntax. Which two syntaxes are correct to configure a web rating override for the home page? (Choose two.)
Show answer
Answer: BD
Question 66 · 89 in bank
Select 2An administrator has configured the following settings:
What are the two results of this configuration? (Choose two.)
Show answer
Answer: BC
Question 67 · 89 in bank
Which method allows management access to the FortiGate CLI without network connectivity?
Show answer
Answer: B
Explanation
B is the correct answer. Don't be fooled by 'CLI console widget'. To even get to the console widget you would need to access the web GUI, which would require a network connection to access it with the browser.
Source: Adapted from community discussion — Magpo
Question 68 · 89 in bank
Refer to the exhibit.
The exhibit shows a diagram of a FortiGate device connected to the network, the firewall policy and VIP configuration on the FortiGate device, and the routing table on the ISP router. When the administrator tries to access the web server public address (203.0.113.2) from the internet, the connection times out. At the same time the administrator runs a sniffer on FortiGate to capture incoming web traffic to the server and does not see any output. Based on the information shown in the exhibit, what configuration change must the administrator make to fix the connectivity issue?
Show answer
Answer: B
Explanation
this happen only when you don't have an IP set in the FortiGate's interface directly, in this example, FortiGate can use the external IP because is connected throught ISP router port (it has no NAT from the ISP), so you need to enable ARP-Reply to let FortiGate answer requests with the WAN interface mac address
Source: Adapted from community discussion — sxcap
Question 69 · 89 in bank
An organization requires remote users to send external application data running on their PCs and access FTP resources through an SSUTLS connection. Which FortiGate configuration can achieve this goal?
Show answer
Answer: B
Question 70 · 89 in bank
Select 3Which three statements about SD-WAN zones are true? (Choose three.)
Show answer
Answer: ABE
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
FCP_FGT_AD-7.4 practice, question 61. 89 questions available.
About this question bank
Version 1.0.0. How we source questions