Question 1

An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

Options :

A : Device detection on all interfaces is enforced for 30 minutes

B : Denied users are blocked for 30 minutes

C : A session for denied traffic is created

D : The number of logs generated by denied traffic is reduced

Answer: C,D

Question 2

Which statement about video filtering on FortiGate is true?

Options :

A : Full SSL Inspection is not required.

B : It is available only on a proxy-based firewall policy.

C : It inspects video files hosted on file sharing services.

D : Video filtering FortiGuard categories are based on web filter FortiGuard categories.

Answer: B

Question 3

Which downstream FortiGate VDOM is used to join the Security Fabric when split-task VDOM is enabled on all FortiGate devices?

Options :

A : FG-traffic VDOM

B : Root VDOM

C : Customer VDOM

D : Global VDOM

Answer: B

Question 4

Refer to the exhibit.

Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit. What do you conclude when adding the FTP.Login.Failed signature to the IPS sensor profile?

Options :

A : Traffic matching the signature will be silently dropped and logged.

B : The signature setting uses a custom rating threshold.

C : The signature setting includes a group of other signatures.

D : raffic matching the signature will be allowed and logged.

Answer: A

Question 5

Which three security features require the intrusion prevention system (IPS) engine to function? (Choose three.)

Options :

A : Web filter in flow-based inspection

B : Antivirus in flow-based inspection

C : DNS filter

D : Web application firewall

E : Application control

Answer: A,B,E

Higher Test Marks with Free Online FCP_FGT_AD-7.4 Exam Practice

Buying Options: