FCP_FGT_AD-7.6 practice questions 71–80

1. Question 71 · 94 in bank

   Select 2

   Refer to the exhibit.

   

   Which two statements about the FortiGuard connection are true? (Choose two.)

   • AFortiGate is using the default port for FortiGuard communication.
   • BFortiGate identified the FortiGuard Server using DNS lookup.
   • CThe weight increases as the number of failed packets rises.
   • DYou can configure unreliable protocols to communicate with FortiGuard Server.

   Show answer

   Answer: CD

   Next question

2. Question 72 · 94 in bank

   Refer to the exhibits.

   

   

   An administrator configured the Web Filter Profile to block access to all social networking sites except Facebook. However, when users try to access Facebook.com, they are redirected to a FortiGuard web filtering block page. Based on the exhibits, which configuration change must the administrator make to allow Facebook while blocking all other social networking sites?

   • AChange the type as Simple in the Static URL Filter section.
   • BSet the Social Networking action as warning in the FortiGuard Category Based Filter.
   • CChange the Feature set of Web Filter Profile as Proxy-based.
   • DSet the Action as Exempt for www.facebook.com in the Static URL Filter.

   Show answer

   Answer: D

   Next question

3. Question 73 · 94 in bank

   Select 2

   You are encountering connectivity problems caused by intermediate devices blocking IPsec traffic. In which two ways can you effectively resolve the problem? (Choose two.)

   • AYou can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500).
   • BYou can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports.
   • CYou can turn on fragmentation to fix large certificate negotiation problems.
   • DYou should use the protocol IKEv2.

   Show answer

   Answer: AB

   Next question

4. Question 74 · 94 in bank

   Select 2

   Refer to the exhibits.

   

   

   You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits. You cannot access any of the Google applications, but you are able to access www.fortinet.com. Which two actions would you take to resolve the issue? (Choose two.)

   • AMove up Google in the Application and Filter Overrides section to set its priority to 1.
   • BSet the action for Google in the Application and Filter Overrides section to Allow.
   • CAdd *Google*.com to the URL category in the security profile.
   • DChange the Inspection mode to Flow-based.
   • ESet SSL inspection to deep-content inspection.

   Show answer

   Answer: AE

   Next question

5. Question 75 · 94 in bank

   Refer to the exhibits.

   

   

   

   The exhibits show the application sensor configuration and the Excessive-Bandwidth and Apple filter details. Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?

   • AApple Face Time will be allowed, based on the Video/Audio category configuration.
   • BApple Face Time will be blocked, based on the Excessive-Bandwidth filter configuration.
   • CApple Face Time will be allowed, based on the Apple filter configuration.
   • DApple Face Time will be allowed only if the Apple filter in Application and Filter Overrides is set to Allow.

   Show answer

   Answer: B

   Next question

6. Question 76 · 94 in bank

   Refer to the exhibits.

   

   

   

   You are asked to implement an antivirus profile for files downloaded through FTP, HTTP, and HTTPS. While testing, you are successful with HTTP and FTP protocols, but FortiGate does not block the file download over HTTPS. What could be the cause?

   • AThe feature set in the antivirus profile is not set to Flow-based.
   • BWeb filter is not enabled on the firewall policy to complement the antivirus profile.
   • CThe action on the firewall policy is not set to deny.
   • DThe SSL inspection mode in the firewall policy is not deep content inspection.

   Show answer

   Answer: D

   Next question

7. Question 77 · 94 in bank

   Refer to the exhibit.

   

   Which statement about this firewall policy list is true?

   • AThe firewall policies are listed by ID sequence view.
   • BThe firewall policies are listed by ingress and egress interfaces pairing view.
   • CThe Implicit group can include more than one deny firewall policy.
   • DLAN to WAN, WAN to LAN, and Implicit are sequence grouping view lists.

   Show answer

   Answer: D

   Next question

8. Question 78 · 94 in bank

   Select 2

   Refer to the exhibit.

   

   Which two statements are true about the routing entries in this database table? (Choose two.)

   • AThe default route on port2 is marked as the standby route.
   • BBoth default routes have different administrative distances.
   • CThe port2 interface is marked as inactive.
   • DAll of the entries in the routing database table are installed in the FortiGate routing table

   Show answer

   Answer: AB

   Next question

9. Question 79 · 94 in bank

   Select 2

   Refer to the exhibit showing a FortiGuard connection debug output.

   

   Based on the output, which two facts does the administrator know about the FortiGuard connection? (Choose two.)

   • AOne server was contacted to retrieve the contract information.
   • BFortiGate is using default FortiGuard communication settings.
   • CThere is at least one server that lost packets consecutively.
   • DA local FortiManager is one of the servers FortiGate communicates with.

   Show answer

   Answer: AB

   Next question

10. Question 80 · 94 in bank

    An administrator must enable a DHCP server on one of the directly connected networks on FortiGate. However, the administrator is unable to complete the process on the GUI to enable the service on the interface. In this scenario, what prevents the administrator from enabling DHCP service?

    • AThe DHCP server setting is available only on the CLI.
    • BAnother interface is configured as the only DHCP server on FortiGate.
    • CThe FortiGate model does not support the DHCP server.
    • DThe role of the interface prevents setting a DHCP server.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FGT_AD-7.6 practice, question 71. 94 questions available.