Smart Success with Fortinet FCP_FGT_AD-7.6 Dumps (V10.03): Read FCP_FGT_AD-7.6 Free Dumps (Part 1, Q1-Q40) First

1. If the Services field is configured in a Virtual IP (VIP), which of the following statements is true when central NAT is used?

2. An administrator wants to configure Dead Peer Detection (DPD) on IPSEC VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when no traffic is observed in the tunnel.

Which DPD mode on FortiGate will meet the above requirement?

3. An administrator has configured central DNAT and virtual IPs.

Which item can be selected in the firewall policy Destination field?

4. Which three criteria can FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

5. Which of the following statements is true regarding SSL VPN settings for an SSL VPN portal?

6. Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

7. An administrator wants to block https://www.example.com/videos and allow all other URLs on the website.

What are two configuration changes that the administrator can make to satisfy the requirement? (Choose two.)

8. What must you configure to enable proxy-based TCP session failover?

9. Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)

10. View the exhibit.

Both VDOMs are operating in NAT/route mode. The subnet 10.0.1.0/24 is connected to VDOM1. The subnet 10.0.2.0/24 is connected to VDOM2. There is an inter-VDOM link between VDOM1 and VDOM2. Also, necessary firewall policies are configured in VDOM1 and VDOM2.

Which two static routes are required in the FortiGate configuration, to route traffic between both subnets through an inter-VDOM link? (Choose two.)

11. A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy. When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the virus and does not block the file, allowing it to be downloaded.

The administrator confirms that the traffic matches the configured firewall policy.

What are two reasons for the failed virus detection by FortiGate? (Choose two.)

12. Which two configuration settings are global settings? (Choose two.)

13. Which statement about traffic flow in an active-active HA cluster is true?

14. NGFW mode allows policy-based configuration for most inspection rules.

Which security profile's configuration does not change when you enable policy-based inspection?

15. Examine the exhibit, which shows a firewall policy configured with multiple security profiles.

Which two security profiles are handled by the IPS engine? (Choose two.)

16. Refer to the exhibit.

An administrator is running a sniffer command as shown in the exhibit.

Which three pieces of information are included in the sniffer output? (Choose three.)

17. Which statement about firewall policy NAT is true?

18. Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)

19. Which two statements about the application control profile mode are true? (Choose two.)

20. Consider the topology:

Application on a Windows machine <--{SSL VPN} -->FGT--> Telnet to Linux server.

An administrator is investigating a problem where an application establishes a Telnet session to a Linux server over the SSL VPN through FortiGate and the idle session times out after about 90 minutes. The administrator would like to increase or disable this timeout.

The administrator has already verified that the issue is not caused by the application or Linux server. This issue does not happen when the application establishes a Telnet connection to the Linux server directly on the LAN.

What two changes can the administrator make to resolve the issue without affecting services running through FortiGate? (Choose two.)

21. Refer to the exhibit.

The exhibit displays the output of the CLI command: diagnose sys ha dump-by vcluster.

Which two statements are true? (Choose two.)

22. Refer to the exhibits.

The exhibits contain a network diagram, and virtual IP, IP pool, and firewall policies configuration information.

The WAN (port1) interface has the IP address 10.200.1.1/24.

The LAN (port3) interface has the IP address 10.0.1.254/24.

The first firewall policy has NAT enabled using IP pool.

The second firewall policy is configured with a VIP as the destination address.

Which IP address will be used to source NAT (SNAT) the internet traffic coming from a workstation with the IP address 10.0.1.10?

23. Refer to the exhibit.

FortiGate is configured for firewall authentication. When attempting to access an external website, the user is not presented with a login prompt.

What is the most likely reason for this situation?

24. Which two statements about antivirus scanning in a firewall policy set to proxy-based inspection mode, are true? (Choose two.)

25. An administrator needs to create a tunnel mode SSL-VPN to access an internal web server from the Internet. The web server is connected to port1. The Internet is connected to port2. Both interfaces belong to the VDOM named Corporation.

What interface must be used as the source for the firewall policy that will allow this traffic?

26. What are two functions of ZTNA? (Choose two.)

27. Refer to the exhibit.

Review the Intrusion Prevention System (IPS) profile signature settings.

Which statement is correct in adding the FTP .Login.Failed signature to the IPS sensor profile?

28. What is the limitation of using a URL list and application control on the same firewall policy, in NGFW policy-based mode?

29. Which two statements are true about collector agent advanced mode? (Choose two.)

30. An administrator has configured a strict RPF check on FortiGate.

How does strict RPF check work?

31. View the exhibit.

A user at 192.168.32.15 is trying to access the web server at 172.16.32.254.

Which two statements best describe how the FortiGate will perform reverse path forwarding (RPF)

checks on this traffic? (Choose two.)

32. Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

33. Refer to the exhibits.

The exhibits show the SSL and authentication policy (Exhibit A) and the security policy (Exhibit B) for Facebook.

Users are given access to the Facebook web application. They can play video content hosted on Facebook, but they are unable to leave reactions on videos or other types of posts.

Which part of the policy configuration must you change to resolve the issue?

34. An administrator does not want to report the login events of service accounts to FortiGate.

What setting on the collector agent is required to achieve this?

35. Examine the two static routes shown in the exhibit, then answer the following question.

Which of the following is the expected FortiGate behavior regarding these two routes to the same destination?

36. Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

37. Which additional load balancing method is supported in equal cost multipath (ECMP) load balancing when SD-WAN is enabled?

38. Refer to the exhibit.

Which statement about the configuration settings is true?

39. Which of the following statements correctly describes FortiGates route lookup behavior when searching for a suitable gateway? (Choose two)

40. Refer to the exhibit showing a debug flow output.

What two conclusions can you make from the debug flow output? (Choose two.)