FCP - FortiGate 7.6 Administrator (FCP_FGT_AD-7.6) Free Practice Test

Question 1

Refer to the exhibits, which show the firewall policy and an antivirus profile configuration.

Why is the user unable to receive a block replacement message when downloading an infected file for the first time?

A. Flow-based inspection is used, which resets the last packet to the user.

B. The option to send files to FortiSandbox for inspection is enabled.

C. The firewall policy performs a full content inspection on the file.

D. The intrusion prevention security profile must be enabled when using flow-based inspection mode.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit.

FortiGate is configured for firewall authentication. When attempting to access an external website, the user is not presented with a login prompt.
What is the most likely reason for this situation?

A. The Remote-users group is not added to the Destination.

B. The Service DNS is required in the firewall policy.

C. No matching user account exists for this user.

D. The user is using an incorrect user name.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit. Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit.
What can you conclude about the signature when adding the FTP.Login.Failed signature to the IPS Sensor profile?

A. The signature setting uses a custom rating threshold

B. FortiGate allows this low severity signature packet and creates a log.

C. FortiGate stores a local copy of the packet that matches the signature.

D. The signature setting includes a group of other signatures.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit. An administrator has created a new firewall address to use as the destination for a static route. Why is the administrator not able to select the new address in the Destination field of the new static route?

A. In the new firewall address, Routing configuration must be enabled.

B. In the new firewall address, the FQDN address must first beresolved.

C. In the new static route, the administrator must select Named Address.

D. In the new static route, the administrator must first set the interface to port2.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

A network administrator has configured an SSL/SSH inspection profile defined for full SSL inspection and set with a private CA certificate. The firewall policy that allows the traffic uses this profile for SSL inspection and performs web filtering. When visiting any HTTPS websites, the browser reports certificate warning errors.
What is the reason for the certificate warning errors?

A. With full SSL inspection it is not possible to avoid certificate warning errors at the browser level.

B. The SSL cipher compliance option is not enabled on the SSL inspection profile. This setting is required when the SSL inspection profile is defined with a private CA certificate.

C. The browser does not recognize the certificate in use as signed by a trusted CA.

D. The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

You have configured the below commands on a FortiGate.

What would be the impact of this configuration on FortiGate?

A. Port1 will be enabled with flexible RPF, and all other interfaces will be enabled for strict RPF

B. FortiGate will enable strict RPF on all its interfaces and port1 will be exempted from RPF checks.

C. FortiGate will enable strict RPF on ail its interfaces and port1 will be enable for asymmetric routing.

D. The global configuration will take precedence and FortiGate will enable strict RPF on all interfaces.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit. Why did FortiGate drop the packet?

A. It matched the default implicit firewall policy.

B. It matched an explicitly configured firewall policy with the action DENY.

C. The next-hop IP address is unreachable.

D. It failed the RPF check.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Which two settings are required for SSL VPN to function between two FortiGate devices?
(Choose two.)

A. The server FortiGate requires a CA certificate to verify the client FortiGate certificate.

B. The client FortiGate requires a client certificate signed by the CA on the server FortiGate.

C. The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.

D. The client FortiGate requires a manually added route to remote subnets.

Correct Answer: A,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and does not block the file, allowing it to be downloaded.
The administrator confirms that the traffic matches the configured firewall policy. What are two reasons for the failed virus detection by FortiGate? (Choose two.)

A. The El CAR test file exceeds the protocol options oversize limit.

B. The website is exempted from SSL inspection.

C. The browser does not trust the FortiGate self-signed CA certificate.

D. The selected SSL inspection profile has certificate inspection enabled.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet FCP - FortiGate 7.6 Administrator (FCP_FGT_AD-7.6) Free Practice Test