FCP_FGT_AD-7.6 Dumps (V11.03) Are the Best Resource for FCP – FortiGate 7.6 Administrator Exam Preparation: Check FCP_FGT_AD-7.6 Free Dumps (Part 1, Q1-Q40)

1. FortiGuard categories can be overridden and defined in different categories. To create a web rating override for the example.com home page, the override must be configured using a specific syntax.

Which two syntaxes are correct to configure a web rating override for the home page? (Choose two.)

2. An administrator does not want to report the login events of service accounts to FortiGate.

What setting on the collector agent is required to achieve this?

3. Which two attributes are required on a certificate so it can be used as a CA certificate on SSL inspection? (Choose two.)

4. Refer to the exhibit.

The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster.

Which two statements are true? (Choose two.)

5. An administrator is configuring an IPsec VPN between site A and site B. The Remote Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24.

Which subnet must the administrator configure for the local quick mode selector for site B?

6. Refer to the exhibits.

Exhibit A shows system performance output.

Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds.

Based on the system performance output, which two results are correct? (Choose two.)

7. To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

8. A network administrator has enabled SSL certificate inspection and antivirus on FortiGate. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and the file can be downloaded.

What is the reason for the failed virus detection by FortiGate?

9. What must you configure to enable proxy-based TCP session failover?

10. Refer to the exhibits.

The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook.

Users are given access to the Facebook web application. They can play video content hosted on Facebook, but they are unable to leave reactions on videos or other types of posts.

Which part of the policy configuration must you change to resolve the issue?

11. Which statement about firewall policy NAT is true?

12. Which two statements are true about collector agent standard access mode? (Choose two.)

13. Refer to exhibit.

An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.

Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

14. If the Services field is configured in a Virtual IP (VIP), which of the following statements is true when central NAT is used?

15. Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

16. Which two statements about incoming and outgoing interfaces in firewall policies are true? (Choose two.)

17. An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.

Which DPD mode on FortiGate will meet the above requirement?

18. Which three methods can you use to deliver the token code to a user who is configured to use two-factor authentication? (Choose three.)

19. Which two statements are true about the FGCP protocol? (Choose two.)

20. Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

21. Which two statements about the application control profile mode are true? (Choose two.)

22. Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.

Based on the phase 2 configuration shown in the exhibit, what configuration change will bring phase 2 up?

23. What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

24. Which two statements about FortiGate antivirus databases are true? (Choose two.)

25. Examine the exhibit, which shows a firewall policy configured with multiple security profiles.

Which two security profiles are handled by the IPS engine? (Choose two.)

26. An administrator has configured central DNAT and virtual IPs.

Which item can be selected in the firewall policy Destination field?

27. A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and does not block the file, allowing it to be downloaded.

The administrator confirms that the traffic matches the configured firewall policy.

What are two reasons for the failed virus detection by FortiGate? (Choose two.)

28. Which statement about the policy ID number of a firewall policy is true?

29. What does the command diagnose debug fsso-polling refresh-user do?

30. Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

31. FortiGate is configured as a policy-based next-generation firewall (NGFW) and is applying web filtering and application control directly on the security policy.

Which two other security profiles can you apply to the security policy? (Choose two.)

32. Which type of logs on FortiGate record information about traffic directly to and from the FortiGate management IP addresses?

33. Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)

34. Which three statements explain a flow-based antivirus profile? (Choose three.)

35. Refer to the exhibit.

An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic.

Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers? (Choose two.)

36. Which timeout setting can be responsible for deleting SSL VPN associated sessions?

37. 1.Refer to the exhibit.

Which route will be selected when trying to reach 10.20.30.254?

38. An administrator wants to monitor their network for any probing attempts aimed to exploit existing vulnerabilities in their servers.

Which two items must they configure on their FortiGate to accomplish this? (Choose two.)

39. Which statement is correct regarding the use of application control for inspecting web applications?

40. Which three criteria can FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)