FCP_FGT_AD-7.6 practice questions 81–90

1. Question 81 · 94 in bank

   Select 2

   Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

   • AThe server FortiGate requires a CA certificate to verify the client FortiGate certificate.
   • BThe client FortiGate requires a manually added route to remote subnets.
   • CThe client FortiGate requires a client certificate signed by the CA on the server FortiGate.
   • DThe client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.

   Show answer

   Answer: AD

   Next question

2. Question 82 · 94 in bank

   Select 2

   Refer to the exhibits.

   

   

   

   

   The exhibits show a diagram of a FortiGate device connected to the network, VIP configuration, firewall policy, and the sniffer CLI output on the FortiGate device. The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IP address 10.0.1.254/24. The webserver host (10.0.1.10) must use its VIP external IP address as the source NAT (SNAT) when it pings remote server (10.200.3.1). Which two statements are valid to achieve this goal? (Choose two.)

   • AEnable NAT on the Allow_access firewall policy.
   • BDisable NAT on the Internet_Access firewall policy.
   • CDisable port forwarding on the VIP object.
   • DCreate a new firewall policy before Internet_Access for the webserver and apply the IP pool.

   Show answer

   Answer: CD

   Next question

3. Question 83 · 94 in bank

   Select 2

   Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)

   • AIncremental configuration synchronization can occur from changes made on any FortiGate device within the HA cluster.
   • BChecksums of devices are compared against each other to ensure configurations are the same.
   • CIncremental configuration synchronization can occur only from changes made on the primary FortiGate device.
   • DChecksums of devices will be different from each other because some configuration items are not synced to other HA members.

   Show answer

   Answer: AB

   Next question

4. Question 84 · 94 in bank

   Which statement is a characteristic of automation stitches?

   • AThey can have one or more triggers.
   • BThey can be created only on downstream devices in the fabric.
   • CThey can run multiple actions at the same time.
   • DThey can be run only on devices in the Security Fabric.

   Show answer

   Answer: C

   Next question

5. Question 85 · 94 in bank

   Select 3

   Which three methods are used by the collector agent for AD polling? (Choose three.)

   • AWinSecLog
   • BNetAPI
   • CFortiGate polling
   • DFSSO REST API
   • EWMI

   Show answer

   Answer: ABE

   Next question

6. Question 86 · 94 in bank

   Refer to the exhibits.

   

   

   

   FGT-1 and FGT-2 are updated with HA configuration commands shown in the exhibit. What would be the expected outcome in the HA cluster?

   • AFGT-2 will take over as the primary because it has the override enable setting and higher priority than FGT-1.
   • BFGT-1 will synchronize the override disable setting with FGT-2.
   • CThe HA cluster will become out of sync because the override setting must match on all HA members.
   • DFGT-1 will remain the primary because FGT-2 has lower priority.

   Show answer

   Answer: A

   Next question

7. Question 87 · 94 in bank

   An employee needs to connect to the office through a high-latency internet connection. Which SSL VPN setting should the administrator adjust to prevent SSL VPN negotiation failure?

   • ASSL VPN dtls-hello-timeout
   • BSSL VPN login-timeout
   • CSSL VPN session-ttl
   • DSSL VPN idle-timeout

   Show answer

   Answer: B

   Next question

8. Question 88 · 94 in bank

   Select 2

   Refer to the exhibit, which shows the IPS sensor configuration.

   

   If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

   • AThe sensor will reset all connections that match these signatures.
   • BThe sensor will gather a packet log for all matched traffic.
   • CThe sensor will allow attackers matching the Microsoft.Windows.iSCSI.Target.DoS signature.
   • DThe sensor will block all attacks aimed at Windows servers.

   Show answer

   Answer: CD

   Next question

9. Question 89 · 94 in bank

   Which inspection mode does FortiGate use for application profiles if it is configured as a profile-based next-generation firewall (NGFW)?

   • ACertificate inspection
   • BFlow-based inspection
   • CProxy-based inspection
   • DFull content inspection

   Show answer

   Answer: B

   Next question

10. Question 90 · 94 in bank

    Refer to the exhibit.

    

    FortiGate has two separate firewall policies for Sales and Engineering to access the same web server with the same security profiles. Which action must the administrator perform to consolidate the two policies into one?

    • ACreate an Interface Group that includes port1 and port2 to create a single firewall policy.
    • BEnable Multiple Interface Policies to select port1 and port2 in the same firewall policy.
    • CReplace port1 and port2 with the any interface in a single firewall policy.
    • DSelect port1 and port2 subnets in a single firewall policy.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FGT_AD-7.6 practice, question 81. 94 questions available.