Fortinet FCP_FGT_AD-7.6 Online Practice Questions and Exam Preparation

Fortinet FCP_FGT_AD-7.6 Online Questions & Answers

• Question 131:

  An administrator notices that some users are unable to establish SSL VPN connections, while others can connect without any issues.

  What should the administrator check first?

  A. Ensure that the affected users are using the correct port number.
  B. Ensure that user traffic is hitting the firewall policy.
  C. Ensure that forced tunneling is enabled to reroute all traffic through the SSL VPN
  D. Ensure that the HTTPS service is enabled on SSL VPN tunnel interface
  A. Ensure that the affected users are using the correct port number.

• Question 132:

  Refer to the exhibit showing a FortiGuard connection debug output.

  

  Based on the output, which two facts does the administrator know about the FortiGuard connection? (Choose two.)

  A. One server was contacted to retrieve the contract information.
  B. FortiGate is using default FortiGuard communication settings.
  C. There is at least one server that lost packets consecutively.
  D. A local FortiManager is one of the servers FortiGate communicates with.
  A. One server was contacted to retrieve the contract information.
  B. FortiGate is using default FortiGuard communication settings.

• Question 133:

  Which statement is a characteristic of automation stitches?

  A. They can have one or more triggers.
  B. They can be created only on downstream devices in the fabric.
  C. They can run multiple actions at the same time.
  D. They can be run only on devices in the Security Fabric.
  C. They can run multiple actions at the same time.

• Question 134:

  Refer to the exhibit.

  

  Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit.

  What can you conclude about the signature when adding the FTP.Login.Failed signature to the IPS Sensor profile?

  A. The signature setting includes a group of other signatures.
  B. FortiGate stores a local copy of the packet that matches the signature.
  C. FortiGate allows this low severity signature packet and creates a log.
  D. The signature setting uses a custom rating threshold
  B. FortiGate stores a local copy of the packet that matches the signature.

• Question 135:

  When configuring firewall policies which of the following is true regarding the policy ID?

  A. It is mandatory to provide a policy ID while creating a firewall policy regardless of GUI or CLI.
  B. A firewall policy ID identifies the order of policy execution in firewall policies.
  C. You can create a policy in CLI with policy ID 0.
  D. A policy ID cannot be edited once a policy is created.
  D. A policy ID cannot be edited once a policy is created.

  ---

  Explanation

  Once a firewall policy is created, its policy ID is fixed and cannot be changed; this ID uniquely identifies the policy within the FortiGate configuration.

• Question 136:

  Refer to the exhibit.

  

  In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output shown in the exhibit.

  What should the administrator do next, to troubleshoot the problem?

  A. Execute a debug flow.
  B. Run a sniffer on the web server.
  C. Execute another sniffer on FortiGate, this time with the filter "host 10.0.1.10".
  D. Capture the traffic using an external sniffer connected to port1.
  A. Execute a debug flow.

• Question 137:

  Refer to the exhibits.

  

  

  

  

  The exhibits show a diagram of a FortiGate device connected to the network, as well as the firewall policy and IP pool configuration on the FortiGate device.

  Two PCs, PC1 and PC2, are connected behind FortiGate and can access the internet successfully.

  However, when the administrator adds a third PC to the network (PC3), the PC cannot connect to the internet.

  Based on the information shown in the exhibit, which two configuration options can the administrator use to fix the connectivity issue for PC3? (Choose two.)

  A. In the IP pool configuration, set type to overload.
  B. In the firewall policy configuration, add 10.0.1.3 as an address object in the source field.
  C. Configure another firewall policy that matches only the address of PC3 as source, and then place the policy on top of the list.
  D. In the IP pool configuration, set endip to 192.2.0.12.
  A. In the IP pool configuration, set type to overload.
  D. In the IP pool configuration, set endip to 192.2.0.12.

• Question 138:

  Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

  A. The server FortiGate requires a CA certificate to verify the client FortiGate certificate.
  B. The client FortiGate requires a manually added route to remote subnets.
  C. The client FortiGate requires a client certificate signed by the CA on the server FortiGate.
  D. The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.
  A. The server FortiGate requires a CA certificate to verify the client FortiGate certificate.
  D. The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.