Fortinet FCP - FortiGate 7.4 Administrator - FCP_FGT_AD-7.4 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Refer to the exhibit.

Which two statements are true about the routing entries in this database table? (Choose two.)

A. The default route on port2 is marked as the standby route. B. All of the entries in the routing database table are installed in the FortiGate routing table. C. The port2 interface is marked as inactive. D. Both default routes have different administrative distances.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

Refer to the exhibits.

FGT-1 and FGT-2 are updated with HA configuration commands shown in the exhibit.
What would be the expected outcome in the HA cluster?

A. The HA cluster will become out of sync because the override setting must match on all HA members. B. FGT-1 will synchronize the override disable setting with FGT-2. C. FGT-2 will take over as the primary because it has the override enable setting and higher priority than FGT-1. D. FGT-1 will remain the primary because FGT-2 has lower priority.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

How can you disable RPF checking?

A. Disable fail-detect on the interface level settings. B. Disable strict-src-check under system settings. C. Unset fail-alert-interfaces on the interface level settings. D. Disable src-check on the interface level settings

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

Which three statements about SD-WAN zones are true? (Choose three.)

A. You can define up to three SD-WAN zones per FortiGate device B. An SD-WAN zone is a logical grouping of members C. An SD-WAN zone can contain physical and logical interfaces D. You can use an SD-WAN zone in static route definitions E. An SD-WAN zone must contains at least two members

Discussion 0

Correct Answer: B,C,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

Refer to the exhibits.

The exhibits show the application sensor configuration and the Excessive-Bandwidth and Apple filter details.
Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?

A. Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration. B. Apple FaceTime will be allowed, based on the Video/Audio category configuration. C. Apple FaceTime will be allowed only if the Apple filter in Application and Filter Overrides is set to Allow. D. Apple FaceTime will be allowed, based on the Apple filter configuration.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively.
Which two statements are true about the requirements of connected physical interfaces on FortiGate? (Choose two.)

A. Both interfaces must have IP addresses assigned B. Both interfaces must have directly connected routes on the routing table C. Both interfaces must have DHCP enabled D. Both interfaces must have the interface role assigned

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Which two pieces of information are synchronized between FortiGate HA members? (Choose two.)

A. DHCP leases B. IPsec security associations C. OSPF adjacencies D. BGP peerings

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

Which two statements describe how the RPF check is used? (Choose two.)

A. The RPF check is a mechanism that protects FortiGate and the network from IP spoofing attacks. B. The RPF check is run on the first reply packet of any new session. C. The RPF check is run on the first sent packet of any new session. D. The RPF check is run on the first sent and reply packet of any new session.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

Refer to the exhibits.

An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?

A. Change the csf setting on Local-FortiGate (root) to sec fabric-object-unification default. B. Change the csf setting on ISFW (downstream) to sec configuration-sync local. C. Change the csf setting on ISFW (downstream) to sec auchorizacion-requesc-cype certificace. D. Change the csf setting on both devices to sec downscream-access enable.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

When FortiGate performs SSL/SSH full inspection, you can decide how it should react when it detects an invalid certificate.
Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate? (Choose three.)

A. Allow B. Trust & Allow C. Block & Warning D. Block E. Allow & Warning

Discussion 0

Correct Answer: A,B,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).