Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free FCP - FortiGate 7.4 Administrator Practice Questions

Exams4sure Dumps

Exam style questions across every FCP_FGT_AD-7.4 domain

Last Update 2 days ago
Total Questions : 89

Start with our free FCP_FGT_AD-7.4 practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real Fortinet Network Security Expert exam. Each FCP_FGT_AD-7.4 exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your Fortinet weak domains, see where you're losing marks, and build a focused study plan in minutes.

FCP_FGT_AD-7.4 PDF

FCP_FGT_AD-7.4 PDF (Printable)
$54.25
$154.99

FCP_FGT_AD-7.4 Testing Engine

FCP_FGT_AD-7.4 PDF (Printable)
$59.5
$169.99

FCP_FGT_AD-7.4 PDF + Testing Engine

FCP_FGT_AD-7.4 PDF (Printable)
$74.55
$212.99
Question # 11

An administrator has configured the following settings:

Question # 11

What are the two results of this configuration? (Choose two.)

Options:

A.  

Denied users are blocked for 30 minutes.

B.  

A session for denied traffic is created.

C.  

The number of logs generated by denied traffic is reduced.

D.  

Device detection on all interfaces is enforced for 30 minutes.

Discussion 0
Question # 12

Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)

Options:

A.  

Checksums of devices are compared against each other to ensure configurations are the same.

B.  

Incremental configuration synchronization can occur only from changes made on the primary FortiGate device.

C.  

Incremental configuration synchronization can occur from changes made on any FortiGate device within the HA cluster

D.  

Checksums of devices will be different from each other because some configuration items are not synced to other HA members.

Discussion 0
Question # 13

Which method allows management access to the FortiGate CLI without network connectivity?

Options:

A.  

SSH console

B.  

CLI console widget

C.  

Serial console

D.  

Telnet console

Discussion 0
Question # 14

When FortiGate performs SSL/SSH full inspection, you can decide how it should react when it detects an invalid certificate.

Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate? (Choose three.)

Options:

A.  

Allow & Warning

B.  

Trust & Allow

C.  

Allow

D.  

Block & Warning

E.  

Block

Discussion 0
Question # 15

An administrator manages a FortiGate model that supports NTurbo.

How does NTurbo enhance performance for flow-based inspection?

Options:

A.  

NTurbo offloads traffic to the content processor.

B.  

NTurbo creates two inspection sessions on the FortiGate device.

C.  

NTurbo buffers the whole file and then sends it to the antivirus engine.

D.  

NTurbo creates a special data path to redirect traffic between the IPS engine its ingress and egress interfaces.

Discussion 0
Question # 16

Refer to the exhibit.

Question # 16

FortiGate is configured for firewall authentication. When attempting to access an external website, the user is not presented with a login prompt.

What is the most likely reason for this situation?

Options:

A.  

The Service DNS is required in the firewall policy.

B.  

The user is using an incorrect user name.

C.  

The Remote-users group is not added to the Destination.

D.  

No matching user account exists for this user.

Discussion 0
Question # 17

An administrator has configured a strict RPF check on FortiGate.

How does strict RPF check work?

Options:

A.  

Strict RPF checks the best route back to the source using the incoming interface.

B.  

Strict RPF allows packets back to sources with all active routes.

C.  

Strict RPF checks only for the existence of at least one active route back to the source using the incoming interface.

D.  

Strict RPF check is run on the first sent and reply packet of any new session.

Discussion 0
Question # 18

Which three methods are used by the collector agent for AD polling? (Choose three.)

Options:

A.  

WinSecLog

B.  

WMI

C.  

NetAPI

D.  

FSSO REST API

E.  

FortiGate polling

Discussion 0
Question # 19

A network administrator is configuring an IPsec VPN tunnel for a sales employee travelling abroad.

Which IPsec Wizard template must the administrator apply?

Options:

A.  

Remote Access

B.  

Site to Site

C.  

Dial up User

D.  

iHub-and-Spoke

Discussion 0
Question # 20

Which statement about the deployment of the Security Fabric in a multi-VDOM environment is true?

Options:

A.  

Downstream devices can connect to the upstream device from any of their VDOMs

B.  

Each VDOM in the environment can be part of a different Security Fabric

C.  

VDOMs without ports with connected devices are not displayed in the topology

D.  

Security rating reports can be run individually for each configured VDOM

Discussion 0

Free Exams Sample Questions