Fortinet FCP_FGT_AD-7.6 Exam Dumps (V10.03) Are Your Guaranteed Materials: Continue to Read FCP_FGT_AD-7.6 Free Dumps (Part 2, Q41-Q80)

1. Which two statements are correct regarding FortiGate FSSO agentless polling mode? (Choose two.)

2. An administrator needs to increase network bandwidth and provide redundancy.

What interface type must the administrator select to bind multiple FortiGate interfaces?

3. An administrator is configuring an IPsec VPN between site A and site B. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24.

Which subnet must the administrator configure for the local quick mode selector for site B?

4. What does the command diagnose debug fsso-polling refresh-user do?

5. Which NAT method translates the source IP address in a packet to another IP address?

6. Which two statements are true about the FGCP protocol? (Choose two.)

7. Refer to the exhibit to view the application control profile.

Based on the configuration, what will happen to Apple FaceTime?

8. Which two IP pool types enable you to identify user connections without having to log user traffic? (Choose two.)

9. Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

10. Which three methods are used by the collector agent for AD polling? (Choose three.)

11. An administrator needs to inspect all web traffic (including Internet web traffic) coming from users connecting to the SSL-VPN.

How can this be achieved?

12. Which are two benefits of using SD-WAN? (Choose two.)

13. To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

14. 1.Refer to the exhibit.

Which route will be selected when trying to reach 10.20.30.254?

15. Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

16. An administrator configured the antivirus profile in a firewall policy set to flow-based inspection mode. While testing the configuration, the administrator noticed that eicar.com test files can be downloaded using HTTPS protocol only.

What is causing this issue?

17. FortiGate is operating in NAT mode and is configured with two virtual LAN (VLAN) subinterfaces added to the same physical interface.

In this scenario, what are two requirements for the VLAN ID? (Choose two.)

18. A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.

All traffic must be routed through the primary tunnel when both tunnels are up. The secondary tunnel must be used only if the primary tunnel goes down. In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover.

Which two key configuration changes must the administrator make on FortiGate to meet the requirements? (Choose two.)

19. View the exhibit.

Which two behaviors result from this full (deep) SSL configuration? (Choose two.)

20. Refer to the exhibits.

An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).

What must the administrator do to synchronize the address object?

21. Which three statements explain a flow-based antivirus profile? (Choose three.)

22. Refer to the exhibits.

Exhibit A shows a topology for a FortiGate HA cluster that performs proxy-based inspection on traffic.

Exhibit B shows the HA configuration and the partial output of the get system ha status command.

Based on the exhibits, which two statements about the traffic passing through the cluster are true? (Choose two.)

23. How does FortiGate act when using SSL VPN in web mode?

24. Which two configuration settings are synchronized when FortiGate devices are in an active-active HA cluster? (Choose two.)

25. Which two statements are true about the Security Fabric rating? (Choose two.)

26. An administrator wants to monitor their network for any probing attempts aimed to exploit existing vulnerabilities in their servers.

Which two items must they configure on their FortiGate to accomplish this? (Choose two.)

27. Which two VDOMs are the default VDOMs created when FortiGate is set up in split VDOM mode? (Choose two.)

28. Which two statements about incoming and outgoing interfaces in firewall policies are true? (Choose two.)

29. Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?

30. Which statement is correct regarding the use of application control for inspecting web applications?

31. Which two IP pool types are useful for carrier-grade NAT deployments? (Choose two.)

32. Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.

Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?

33. Which two settings can be separately configured per VDOM on a FortiGate device? (Choose two.)

34. What are two benefits of flow-based inspection compared to proxy-based inspection? (Choose two.)

35. Which three settings and protocols can be used to provide secure and restrictive administrative access to FortiGate? (Choose three.)

36. Which two statements about advanced AD access mode for the FSSO collector, agent are true? (Choose two.)

37. Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)

38. Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

39. Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command.

Which statement is correct If option 5 was used with the IPS diagnostic command and the outcome was a decrease in the CPU usage?

40. An administrator is configuring an Ipsec between site A and site B. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24.

How must the administrator configure the local quick mode selector for site B?