Fortinet FCP_FGT_AD-7.6 Exam Dumps (V10.03) Help You Achieve Success: FCP_FGT_AD-7.6 Free Dumps (Part 3, Q81-Q120) Are Online for Learning

1. A network administrator is configuring a new IPsec VPN tunnel on FortiGate. The remote peer IP address is dynamic. In addition, the remote peer does not support a dynamic DNS update service.

Which type of remote gateway should the administrator configure on FortiGate for the new IPsec VPN tunnel to work?

2. Which statement about video filtering on FortiGate is true?

3. Which statement correctly describes the use of reliable logging on FortiGate?

4. Refer to the exhibit.

The exhibit shows a diagram of a FortiGate device connected to the network, the firewall policy and VIP configuration on the FortiGate device, and the routing table on the ISP router.

When the administrator tries to access the web server public address (203.0.113.2) from the internet, the connection times out. At the same time, the administrator runs a sniffer on FortiGate to capture incoming web traffic to the server and does not see any output.

Based on the information shown in the exhibit, what configuration change must the administrator make to fix the connectivity issue?

5. Which two statements correctly describe the differences between IPsec main mode and IPsec aggressive mode? (Choose two.)

6. What is the common feature shared between IPv4 and SD-WAN ECMP algorithms?

7. Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

8. Which two settings must you configure when FortiGate is being deployed as a root FortiGate in a Security Fabric topology? (Choose two.)

9. Which two attributes are required on a certificate so it can be used as a CA certificate on SSL inspection? (Choose two.)

10. Which two statements are true when FortiGate is in transparent mode? (Choose two.)

11. What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

12. Which three actions are valid for static URL filtering? (Choose three.)

13. Which timeout setting can be responsible for deleting SSL VPN associated sessions?

14. Refer to exhibit.

An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.

Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

15. Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

16. FortiGate is configured as a policy-based next-generation firewall (NGFW) and is applying web filtering and application control directly on the security policy.

Which two other security profiles can you apply to the security policy? (Choose two.)

17. Which three methods can you use to deliver the token code to a user who is configured to use two-factor authentication? (Choose three.)

18. Refer to the exhibit.

The exhibit shows the IPS sensor configuration.

If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

19. Refer to the exhibit.

An administrator has configured a performance SLA on FortiGate, which failed to generate any traffic.

Why is FortiGate not sending probes to 4.2.2.2 and 4.2.2.1 servers? (Choose two.)

20. Which three options are the remote log storage options you can configure on FortiGate? (Choose three.)

21. An administrator has configured the following settings:

config system settings

set ses-denied-traffic enable

end

config system global

set block-session-timer 30

end

What are the two results of this configuration? (Choose two.)

22. Which two types of traffic are managed only by the management VDOM? (Choose two.)

23. Which statement best describes the role of a DC agent in an FSSO DC agent mode solution?

24. View the exhibit.

date=2022-06-14 time=14:45:16 logid=0317013312 type=utm subtype=webfilter eventtype=ftgd_allow level=notice vd="root" policyid=2 identidx=1 sessionid=31232959 user="anonymous" group="ldap_users" srcip=192.168.1.24 srcport=63355 srcintf="port2" dstip=66.171.121.44 dstport=80 dstintf="port1" service="http" hostname="www.fortinet.com" profiletype="Webfilter_Profile" profile="default" status="passthrough" reqtype="direct" url="/" sentbyte=304 rcvdbyte=60135 msg="URL belongs to an allowed category in policy" method=domain class=0 cat=140 catdesc="custom1"

What two things does this raw log indicate? (Choose two.)

25. Which two statements are true about collector agent standard access mode? (Choose two.)

26. FortiGuard categories can be overridden and defined in different categories. To create a web rating override for the example.com home page, the override must be configured using a specific syntax.

Which two syntaxes are correct to configure a web rating override for the home page? (Choose two.)

27. Which type of logs on FortiGate record information about traffic directly to and from the FortiGate management IP addresses?

28. Which two statements about SSL VPN between two FortiGate devices are true? (Choose two.)

29. Refer to the exhibits.

The exhibits show the firewall policies and the objects used in the firewall policies.

The administrator is using the Policy Lookup feature and has entered the search criteria shown in the exhibit.

Which policy will be highlighted, based on the input criteria?

30. Which of the following statements about backing up logs from the CLI and downloading logs from the GUI are true? (Choose two.)

31. Which statement about the policy ID number of a firewall policy is true?

32. Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

33. Refer to the exhibits.

Exhibit A shows system performance output.

Exhibit B shows a FortiGate configured with the default configuration of high memory usage thresholds.

Based on the system performance output, which two results are correct? (Choose two.)

34. Which two statements about FortiGate antivirus databases are true? (Choose two.)

35. Which security feature does FortiGate provide to protect servers located in the internal networks from attacks such as SQL injections?

36. Refer to the exhibit.

The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode.

The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access the internet. The To_Internet VDOM is the only VDOM with internet access and is directly connected to ISP modem.

With this configuration, which statement is true?

37. A network administrator has enabled SSL certificate inspection and antivirus on FortiGate. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and the file can be downloaded.

What is the reason for the failed virus detection by FortiGate?

38. Refer to the exhibits.

The exhibits show a firewall policy (Exhibit A) and an antivirus profile (Exhibit B).

Why is the user unable to receive a block replacement message when downloading an infected file for the first time?

39. What is eXtended Authentication (XAuth)?

40. An administrator needs to configure VPN user access for multiple sites using the same soft FortiToken.

Each site has a FortiGate VPN gateway.

What must an administrator do to achieve this objective?