Free FCP-FGT-AD-7-4 – Fortinet FCP-FGT-AD-7-4 Practice Test Question

Select an option, then click Submit answer.

• ○ Connected monitored ports > Priority > System uptime > FortiGate serial number
• ○ Connected monitored ports > System uptime > Priority > FortiGate serial number
• ○ Connected monitored ports > Priority > HA uptime > FortiGate serial number
• ○ Connected monitored ports > HA uptime > Priority > FortiGate serial number

Select an option, then click Submit answer.

• ○ The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.
• ○ The server FortiGate requires a CA certificate to verify the client FortiGate certificate.
• ○ The client FortiGate requires a client certificate signed by the CA on the server FortiGate.
• ○ The client FortiGate requires a manually added route to remote subnets.

Select an option, then click Submit answer.

• ○ NTurbo offloads traffic to the content processor.
• ○ NTurbo creates two inspection sessions on the FortiGate device.
• ○ NTurbo buffers the whole file and then sends it to the antivirus engine.
• ○ NTurbo creates a special data path to redirect traffic between the IPS engine its ingress and egress interfaces.

Select an option, then click Submit answer.

• ○ On HQ-FortiGate, disable Diffie-Helman group 2.
• ○ On Remote-FortiGate, set port2 as Interface.
• ○ On both FortiGate devices, set Dead Peer Detection to On Demand.
• ○ On HQ-FortiGate, set IKE mode to Main (ID protection).

Select an option, then click Submit answer.

• ○ WinSecLog
• ○ WMI
• ○ NetAPI
• ○ FSSO REST API
• ○ FortiGate polling

Select an option, then click Submit answer.

• ○ Internet Service Database (ISDB) engine
• ○ Intrusion prevention system engine
• ○ Antivirus engine
• ○ Application control engine

Select an option, then click Submit answer.

• ○ Denied users are blocked for 30 minutes.
• ○ A session for denied traffic is created.
• ○ The number of logs generated by denied traffic is reduced.
• ○ Device detection on all interfaces is enforced for 30 minutes.

Select an option, then click Submit answer.

• ○ Configure a loopback interface with address 203.0.113.2/32.
• ○ In the VIP configuration, enable arp-reply.
• ○ In the firewall policy configuration, enable match-vip.
• ○ Enable port forwarding on the server to map the external service port to the internal service port.

Select an option, then click Submit answer.

• ○ Change the csf setting on Local-FortiGate (root) to set fabric-object-unification default.
• ○ Change the csf setting on both devices to set downstream-access enable.
• ○ Change the csf setting on ISFW (downstream) to set authorization-request-type certificate.
• ○ Change the csf setting on ISFW (downstream) to set configuration-sync local.