FCP - FortiGate 7.4 Administrator (FCP_FGT_AD-7.4) Free Practice Test

Question 1

Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true? (Choose two.)

A. If SD-WAN is enabled, you can configure routes with unequal distance and priority values to be part of ECMP

B. If SD-WAN is disabled, you configure the load balancing algorithm in config system settings.

C. If SD-WAN is disabled, you can configure the parameter v4-ecmp-mode to volume-based.

D. If SD-WAN is enabled, you control the load balancing algorithm with the parameter load-balance-mode.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

An administrator manages a FortiGate model that supports NTurbo.
How does NTurbo enhance performance for flow-based inspection?

A. NTurbo offloads traffic to the content processor.

B. NTurbo buffers the whole file and then sends it to the antivirus engine.

C. NTurbo creates a special data path to redirect traffic between the IPS engine its ingress and egress interfaces.

D. NTurbo creates two inspection sessions on the FortiGate device.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Refer to the exhibits.

The SSL VPN connection fails when a user attempts to connect to it.
What should the user do to successfully connect to the SSL VPN?

A. Change the idle timeout.

B. Change the server IP address.

C. Change the SSL VPN portal to the tunnel.

D. Change the SSL VPN port on the client.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit.

In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output shown in the exhibit.
What should the administrator do next, to troubleshoot the problem?

A. Execute another sniffer on FortiGate, this time with the filter "hose 10.o.1.10".

B. Run a sniffer on the web server.

C. Execute a debug flow.

D. Capture the traffic using an external sniffer connected to part1.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which two pieces of information are synchronized between FortiGate HA members? (Choose two.)

A. IPsec security associations

B. OSPF adjacencies

C. BGP peerings

D. DHCP leases

Correct Answer: A,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Refer to exhibit.

An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.
Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

A. On the FortiGuard Category Based Filter configuration set Action to Warning for Social Networking

B. On the Static URL Filter configuration set Action to Exempt

C. On the Static URL Filter configuration set Type to Simple

D. On the Static URL Filter configuration set Action to Monitor

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings.
What is true about the DNS connection to a FortiGuard server?

A. It uses UDP 8888.

B. It uses UDP 53.

C. It uses DNS over HTTPS.

D. It uses DNS over TLS.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Refer to the exhibit.

Which statement about this firewall policy list is true?

A. The firewall policies are listed by ID sequence view.

B. The Implicit group can include more than one deny firewall policy.

C. LAN to WAN. WAN to LAN. and Implicit are sequence grouping view lists.

D. The firewall policies are listed by ingress and egress interfaces pairing view.

Correct Answer: C

Question 9

Refer to the exhibit, which shows a partial configuration from the remote authentication server.

Why does the FortiGate administrator need this configuration?

A. To authenticate only the Training user group.

B. To set up a RADIUS server Secret

C. To authenticate and match the Training OU on the RADIUS server.

D. To authenticate Any FortiGate user groups.

Correct Answer: A

Question 10

Refer to the exhibits, which show the firewall policy and the security profile for Facebook.

Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the configuration must you change to resolve the issue?

A. Add Facebook to the URL category in the security policy

B. Disable HTTP redirect to HTTPS on the web browser

C. Make the SSL inspection a deep content inspection

D. Get the additional application signatures required to add to the security policy

Correct Answer: C

Welcome to TestSimulate

Fortinet FCP - FortiGate 7.4 Administrator (FCP_FGT_AD-7.4) Free Practice Test