Fortinet FCP_FGT_AD-7.6 Online Practice Questions and Exam Preparation

Fortinet FCP_FGT_AD-7.6 Online Questions & Answers

• Question 71:

  Refer to the exhibits.

  

  The exhibits show the system performance output and default configuration of high memory usage thresholds on a FortiGate device.

  Based on the system performance output, what are the two possible outcomes? (Choose two.)

  A. FortiGate has entered conserve mode.
  B. Administrators can access FortiGate only through the console port.
  C. Administrators can change the configuration.
  D. FortiGate drops new sessions.
  A. FortiGate has entered conserve mode.
  C. Administrators can change the configuration.

• Question 72:

  An administrator needs to prevent administrators from accessing FortiGate from untrusted WAN addresses. Which configuration enforces this requirement?

  A. Disable HTTPS service under Administrative Access on the WAN interface
  B. Apply a local-in policy to block HTTPS from untrusted sources
  C. Remove the "FGT_Admin" group from trusted hosts list
  D. Configure trusted hosts under each admin account and leave WAN access enabled
  D. Configure trusted hosts under each admin account and leave WAN access enabled

• Question 73:

  An administrator sees that some traffic is not offloaded to hardware acceleration even though offloading is supported. Which scenario prevents hardware acceleration?

  A. Traffic matching a deny policy
  B. Traffic using IPsec encryption
  C. Traffic inspected by antivirus in proxy-based mode
  D. Traffic routed to a VLAN subinterface
  C. Traffic inspected by antivirus in proxy-based mode

  ---

  Explanation

  Proxy-based inspection requires full content buffering and cannot use NP or NPU offloading. Flow-based inspection is required for hardware acceleration.

• Question 74:

  Which method allows management access to the FortiGate CLI without network connectivity?

  A. CLI console widget
  B. SSH console
  C. Telnet console
  D. Serial console
  D. Serial console

• Question 75:

  After configuring a new IPS sensor with several custom signatures, the administrator sees no logs from the signatures even though the traffic matches the firewall policy.

  What is the likely reason?

  A. The IPS sensor is configured in monitor mode
  B. Logging is not enabled in the firewall policy
  C. The signatures' severity levels are set to Low
  D. The IPS engine is in bypass state due to conserve mode
  A. The IPS sensor is configured in monitor mode

• Question 76:

  Refer to the exhibits.

  

  

  An administrator configured the Web Filter Profile to block access to all social networking sites except Facebook. However, when users try to access Facebook.com, they are redirected to a FortiGuard web filtering block page.

  Based on the exhibits, which configuration change must the administrator make to allow Facebook while blocking all other social networking sites?

  A. Change the type as Simple in the Static URL Filter section.
  B. Set the Social Networking action as warning in the FortiGuard Category Based Filter.
  C. Change the Feature set of Web Filter Profile as Proxy-based.
  D. Set the Action as Exempt for www.facebook.com in the Static URL Filter.
  D. Set the Action as Exempt for www.facebook.com in the Static URL Filter.

  ---

  Explanation

  The FortiGuard category filter is blocking Social Networking, which includes Facebook. Although a static URL filter entry for www.facebook.com exists, its action is set to Monitor, so it does not override the category block. To allow Facebook while blocking other social networking sites, the action for www.facebook.com in the Static URL Filter must be set to Exempt. This explicitly bypasses category filtering for that URL.

• Question 77:

  Which three methods are used by the collector agent for AD polling? (Choose three.)

  A. WinSecLog
  B. NetAPI
  C. FortiGate polling
  D. FSSO REST API
  E. WMI
  A. WinSecLog
  B. NetAPI
  E. WMI

• Question 78:

  Refer to the exhibit.

  

  As an administrator you have created an IPS profile, but it is not performing as expected. While testing you got the output as shown in the exhibit.

  What could be the possible reason of the diagnose output shown in the exhibit?

  A. There is a no firewall policy configured with an IPS security profile.
  B. FortiGate entered into IPS fail open state.
  C. Administrator entered the command diagnose test application ipsmonitor 5.
  D. Administrator entered the command diagnose test application ipsmonitor 99.
  A. There is a no firewall policy configured with an IPS security profile.

  ---

  Explanation

  The output shows the IPS engine count as 0, indicating no active IPS engines are running. This typically means no firewall policy is referencing the IPS security profile, so the IPS profile is not being applied or triggered.

• Question 79:

  Which two statements are correct when FortiGate enters conserve mode? (Choose two.)

  A. FortiGate continues to run critical security actions, such as quarantine.
  B. FortiGate refuses to accept configuration changes.
  C. FortiGate halts complete system operation and requires a reboot to regain available resources.
  D. FortiGate continues to transmit packets without IPS inspection when the fail-open global setting in IPS is enabled.
  B. FortiGate refuses to accept configuration changes.
  D. FortiGate continues to transmit packets without IPS inspection when the fail-open global setting in IPS is enabled.

  ---

  Explanation

  In conserve mode, FortiGate restricts configuration changes to preserve system stability.

  When IPS fail-open is enabled, FortiGate continues forwarding traffic without IPS inspection during resource constraints (conserve mode).

• Question 80:

  Refer to the exhibit.

  

  What would be the impact of these settings on the Server certificate SNI check configuration on FortiGate?

  A. FortiGate will accept and use the CN in the server certificate for URL filtering if the SNI does not match the CN or SAN fields.
  B. FortiGate will accept the connection with a warning if the SNI does not match the CN or SAN fields.
  C. FortiGate will close the connection if the SNI does not match the CN or SAN fields.
  D. FortiGate will close the connection if the SNI does not match the CN and SAN fields
  C. FortiGate will close the connection if the SNI does not match the CN or SAN fields.