Fortinet FCP_FGT_AD-7.4 Practice Questions| TestInsights

Question 1

Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)

AChecksums of devices are compared against each other to ensure configurations are the same.

BIncremental configuration synchronization can occur only from changes made on the primary FortiGate device.

CIncremental configuration synchronization can occur from changes made on any FortiGate device within the HA cluster

DChecksums of devices will be different from each other because some configuration items are not synced to other HA members.

Correct : A, B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AChecksums of devices are compared against each other to ensure configurations are the same.

BIncremental configuration synchronization can occur only from changes made on the primary FortiGate device.

CIncremental configuration synchronization can occur from changes made on any FortiGate device within the HA cluster

DChecksums of devices will be different from each other because some configuration items are not synced to other HA members.

Question 2

What are two features of the NGFW profile-based mode? (Choose two.)

ANGFW profile-based mode can only be applied globally and not on individual VDOMs.

BNGFW profile-based mode must require the use of central source NAT policy

CNGFW profile-based mode policies support both flow inspection and proxy inspection.

DNGFW profile-based mode supports applying applications and web filtering profiles in a firewall policy.

Correct : C, D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ANGFW profile-based mode can only be applied globally and not on individual VDOMs.

BNGFW profile-based mode must require the use of central source NAT policy

CNGFW profile-based mode policies support both flow inspection and proxy inspection.

DNGFW profile-based mode supports applying applications and web filtering profiles in a firewall policy.

Question 3

Refer to the exhibit to view the firewall policy.

Why would the firewall policy not block a well-known virus, for example eicar?

AThe action on the firewall policy is not set to deny.

BThe firewall policy is not configured in proxy-based inspection mode.

CWeb filter is not enabled on the firewall policy to complement the antivirus profile.

DThe firewall policy does not apply deep content inspection.

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe action on the firewall policy is not set to deny.

BThe firewall policy is not configured in proxy-based inspection mode.

CWeb filter is not enabled on the firewall policy to complement the antivirus profile.

DThe firewall policy does not apply deep content inspection.

Question 4

Which inspection mode does FortiGate use for application profiles if it is configured as a profile-based next-generation firewall (NGFW)?

AFull content inspection

BProxy-based inspection

CCertificate inspection

DFlow-based inspection

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AFull content inspection

BProxy-based inspection

CCertificate inspection

DFlow-based inspection

Question 5

Refer to the exhibit showing a FortiGuard connection debug output.

Based on the output, which two facts does the administrator know about the FortiGuard connection? (Choose two.)

AOne server was contacted to retrieve the contract information.

BThere is at least one server that lost packets consecutively.

CA local FortiManaqer is one of the servers FortiGate communicates with.

DFortiGate is using default FortiGuard communication settings.

Correct : A, D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AOne server was contacted to retrieve the contract information.

BThere is at least one server that lost packets consecutively.

CA local FortiManaqer is one of the servers FortiGate communicates with.

DFortiGate is using default FortiGuard communication settings.

Curious about Actual Fortinet Certified Professional (FCP_FGT_AD-7.4) Exam Questions?

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: