Fortinet FCP_FGT_AD-7.6 Free Dumps (Part 3, Q81-Q100) Are Online for Helping You Check More About the FCP_FGT_AD-7.6 Dumps (V8.03)

1. How does FortiGate act when using SSL VPN in web mode?

2. Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?

3. Which two statements about SSL VPN between two FortiGate devices are true? (Choose two.)

A. The client FortiGate requires a client certificate signed by the CA on the server FortiGate.

B. The client FortiGate requires a manually added route to remote subnets.

C. The client FortiGate uses the SSL VPN tunnel interface type to connect SSL VPN.

D. Server FortiGate requires a CA certificate to verify the client FortiGate certificate.

4. A network administrator has enabled SSL certificate inspection and antivirus on FortiGate. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and the file can be downloaded.

What is the reason for the failed virus detection by FortiGate?

5. An administrator is configuring an Ipsec between site A and site B. The Remotes Gateway setting in both sites has been configured as Static IP Address. For site A, the local quick mode selector is 192.16.1.0/24 and the remote quick mode selector is 192.16.2.0/24.

How must the administrator configure the local quick mode selector for site B?

A. 192.16.3.0/24

B. 192.16.2.0/24

C. 192.16.1.0/24

D. 192.16.0.0/8

6. FortiGate is configured as a policy-based next-generation firewall (NGFW) and is applying web filtering and application control directly on the security policy.

Which two other security profiles can you apply to the security policy? (Choose two.)

A. Antivirus scanning

B. File filter

C. DNS filter

D. Intrusion prevention

7. Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)

A. The subject field in the server certificate

B. The serial number in the server certificate

C. The server name indication (SNI) extension in the client hello message

D. The subject alternative name (SAN) field in the server certificate

E. The host field in the HTTP header

8. Refer to the exhibit.

An administrator is running a sniffer command as shown in the exhibit.

Which three pieces of information are included in the sniffer output? (Choose three.)

9. To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

10. NGFW mode allows policy-based configuration for most inspection rules.

Which security profile's configuration does not change when you enable policy-based inspection?

11. Refer to the exhibit to view the application control profile.

Based on the configuration, what will happen to Apple FaceTime?

12. Which two statements are true about collector agent standard access mode? (Choose two.)

A. Standard mode uses Windows convention-NetBios: DomainUsername.

B. Standard mode security profiles apply to organizational units (OU).

C. Standard mode security profiles apply to user groups.

D. Standard access mode supports nested groups.

13. What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

14. Which two types of traffic are managed only by the management VDOM? (Choose two.)

15. Which two protocol options are available on the CLI but not on the GUI when configuring an SD-WAN Performance SLA? (Choose two.)

A. udp-echo

B. DNS

C. TWAMP

D. ping

16. Which two VDOMs are the default VDOMs created when FortiGate is set up in split VDOM mode? (Choose two.)

17. Which three methods are used by the collector agent for AD polling? (Choose three.)

A. WMI

B. Novell API

C. WinSecLog

D. NetAPI

E. FortiGate polling

18. If the Services field is configured in a Virtual IP (VIP), which of the following statements is true when central NAT is used?

19. An administrator needs to increase network bandwidth and provide redundancy.

What interface type must the administrator select to bind multiple FortiGate interfaces?

20. Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?