FCP_FGT_AD-7.6 practice questions 11–20

1. Question 11 · 94 in bank

   Refer to the exhibit, which shows a partial configuration from the remote authentication server.

   

   Why does the FortiGate administrator need this configuration?

   • ATo set up a RADIUS server Secret.
   • BTo authenticate Any FortiGate user groups.
   • CTo authenticate and match the Training OU on the RADIUS server.
   • DTo authenticate only the Training user group.

   Show answer

   Answer: D

   Next question

2. Question 12 · 94 in bank

   Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.

   

   Based on the exhibit, which statement is true?

   • AThe Underlay zone is the zone by default.
   • BThe Underlay zone contains no member.
   • Cport2 and port3 are not assigned to a zone.
   • DThe virtual-wan-link and overlay zones can be deleted.

   Show answer

   Answer: B

   Next question

3. Question 13 · 94 in bank

   Select 2

   Which two statements describe characteristics of automation stitches? (Choose two.)

   • AActions involve only devices included in the Security Fabric.
   • BAn automation stitch can have multiple triggers.
   • CMultiple actions can run in parallel.
   • DTriggers can involve external connectors.

   Show answer

   Answer: CD

   Next question

4. Question 14 · 94 in bank

   Refer to the exhibit.

   

   An administrator has configured an Application Overrides for the ABC.Com application signature and set the Action to Allow. This application control profile is then applied to a firewall policy that is scanning all outbound traffic. Logging is enabled in the firewall policy. To test the configuration, the administrator accessed the ABC.Com web site several times. Why are there no logs generated under security logs for ABC.Com?

   • AThe ABC.Com Type is set as Application instead of Filter.
   • BThe ABC.Com is configured under application profile, which must be configured as a web filter profile.
   • CThe ABC.Com Action is set to Allow.
   • DThe ABC.Com is hitting the category Excessive-Bandwidth.

   Show answer

   Answer: C

   Next question

5. Question 15 · 94 in bank

   Select 3

   Which three statements explain a flow-based antivirus profile? (Choose three.)

   • AFortiGate buffers the whole file but transmits to the client at the same time.
   • BFlow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection.
   • CIf a virus is detected, the last packet is delivered to the client.
   • DFlow-based inspection optimizes performance compared to proxy-based inspection.
   • EThe IPS engine handles the process as a standalone.

   Show answer

   Answer: BDE

   Next question

6. Question 16 · 94 in bank

   Select 3

   Which three statements about SD-WAN performance SLAs are true? (Choose three.)

   • AThey rely on session loss and jitter.
   • BThey can be measured actively or passively.
   • CThey are applied in a SD-WAN rule lowest cost strategy.
   • DThey monitor the state of the FortiGate device.
   • EAll the SLA targets can be configured.

   Show answer

   Answer: BCE

   Next question

7. Question 17 · 94 in bank

   Select 2

   A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and does not block the file, allowing it to be downloaded. The administrator confirms that the traffic matches the configured firewall policy. What are two reasons for the failed virus detection by FortiGate? (Choose two.)

   • AThe selected SSL inspection profile has certificate inspection enabled.
   • BThe website is exempted from SSL inspection.
   • CThe El CAR test file exceeds the protocol options oversize limit.
   • DThe browser does not trust the FortiGate self-signed CA certificate.

   Show answer

   Answer: AB

   Next question

8. Question 18 · 94 in bank

   You have configured the below commands on a FortiGate.

   

   What would be the impact of this configuration on FortiGate?

   • AFortiGate will enable strict RPF on ail its interfaces and port1 will be enable for asymmetric routing.
   • BFortiGate will enable strict RPF on all its interfaces and port1 will be exempted from RPF checks.
   • CPort1 will be enabled with flexible RPF, and all other interfaces will be enabled for strict RPF
   • DThe global configuration will take precedence and FortiGate will enable strict RPF on all interfaces.

   Show answer

   Answer: B

   Next question

9. Question 19 · 94 in bank

   Select 2

   Which two statements are true about an HA cluster? (Choose two.)

   • AAn HA cluster cannot have both in-band and out-of-band management interfaces at the same time.
   • BLink failover triggers a failover if the administrator sets the interface down on the primary device.
   • CWhen sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2.
   • DHA incremental synchronization includes FIB entries and IPsec SAs.

   Show answer

   Answer: BD

   Next question

10. Question 20 · 94 in bank

    Refer to the exhibit.

    

    What would be the impact of these settings on the Server certificate SNI check configuration on FortiGate?

    • AFortiGate will accept and use the CN in the server certificate for URL filtering if the SNI does not match the CN or SAN fields.
    • BFortiGate will accept the connection with a warning if the SNI does not match the CN or SAN fields.
    • CFortiGate will close the connection if the SNI does not match the CN or SAN fields.
    • DFortiGate will close the connection if the SNI does not match the CN and SAN fields

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FGT_AD-7.6 practice, question 11. 94 questions available.