Fortinet FCP - FortiGate 7.6 Administrator - FCP_FGT_AD-7.6 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Refer to the exhibit. The NOC team connects to the FortiGate GUI with the NOC_Access admin profile. They request that their GUI sessions do not disconnect too early during inactivity. What must the administrator configure to answer this specific request from the NOC team?

A. Increase the offline value of the Override Idle Timeout parameter in the NOC_Access admin profile. B. Ensure that all NOC_Access users are assigned the super_admin role to guarantee access C. Move NOC_Access to the top of the list to ensure all profile settings take effect. D. Increase the admintimeout value under config system accprofile NOC_Access.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit. Why did the FortiGate device drop the packet?

A. It matched the default implicit firewall policy. B. It failed the RPF check. C. It matched an explicitly configured firewall policy with the action DENY. D. It cannot reach the next-hop IP.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit. The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile.

An administrator must block access to download.com, which belongs to the Freeware and Software Downloads category. The administrator must also allow other websites in the same category.
What are two solutions for satisfying the requirement? (Choose two.)

A. Configure a separate firewall policy with action Deny and an FQDN address object for*.download.com as destination address. B. Configure a web override rating for download.com and select Malicious Websites as the subcategory. C. Set the Freeware and Software Downloads category Action to Warning. D. Configure a static URL filter entry for download.com with Type and Action set to Wildcard and Block, respectively.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit. FortiGate has two separate firewall policies for Sales and Engineering to access the same web server with the same security profiles.
Which action must the administrator perform to consolidate the two policies into one?

A. Create an Aggregate interface that includes port1 and port2 to create a single firewall policy. B. Enable Multiple Interface Policies to select port1 and port2 in the same firewall policy. C. Replace port1 and port2 with the any interface in a single firewall policy. D. Select port1 and port2 subnets in a single firewall policy.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

Refer to the exhibits. You have implemented the application sensor and the corresponding firewall policy as shown in the exhibits.
You cannot access any of the Google applications, but you are able to access www.fortinet.com.
What would you do to resolve this issue?

A. Move up Google in the Application and Filter Overrides section to set its priority to 1. B. Set SSL inspection to deep-content-inspection. C. Change the Inspection mode to Proxy-based. D. Add *Google*.com to the URL category in the security profile.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

Refer to the exhibits. An administrator wants to add HQ-ISFW-2 in the Security Fabric. HQ-ISFW-
2 is in the same subnet as HQ-ISFW. After configuring the Security Fabric settings on HQ-ISFW-
2, the status stays Pending.

What can be the two possible reasons? (Choose two.)

A. Management IP must be set to 10.0.13.254. B. SAML Single Sign-On must be set to Manual. C. HQ-ISFW-2 must be authorized on HQ-ISFW. D. Upstream FortiGate IP must be set to 10.0.11.254.

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

A. Extended authentication (XAuth) to request the remote peer to provide a username and password B. Extended authentication (XAuth) for faster authentication because fewer packets are exchanged C. No certificate is required on the remote peer when you set the certificate signature as the authentication method D. Pre-shared key and certificate signature as authentication methods

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

FortiGate is integrated with FortiAnalyzer and FortiManager.
When creating a firewall policy, which attribute must an administrator include to enhance functionality and enable log recording on FortiAnalyzer and FortiManager?

A. Sequence ID B. Log ID C. Policy ID D. Universally Unique Identifier

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

Which two statements are true about an HA cluster? (Choose two.)

A. When sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2. B. Link failover triggers a failover if the administrator sets the interface down on the primary device. C. HA incremental synchronization includes FIB entries and IPsec SAs. D. An HA cluster cannot have both in-band and out-of-band management interfaces at the same time.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).