Question 1

Which two actions can you perform only from the root FortiGate in a Security Fabric? (Choose two.)

Options :

A : Shut down/reboot a downstream FortiGate device.

B : Disable FortiAnalyzer logging for a downstream FortiGate device.

C : Log in to a downstream FortiSwitch device.

D : Ban or unban compromised hosts.

Answer: A,D

Question 2

Refer to the exhibit.

.

Which contains a network diagram and routing table output. The Student is unable to access Webserver.

What is the cause of the problem and what is the solution for the problem?

Options :

A : The first packet sent from Student failed the RPF check. This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.

B : The first reply packet for Student failed the RPF check. This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.

C : The first reply packet for Student failed the RPF check. This issue can be resolved by adding a static route to 203.0.114.24/32 through port3.

D : The first packet sent from Student failed the RPF check. This issue can be resolved by adding a static route to 203.0.114.24/32 through port3.

Answer: C

Question 3

Refer to the exhibit to view the authentication rule configuration.

In this scenario, which statement is true?

Options :

A : Session-based authentication is enabled

B : Policy-based authentication is enabled

C : IP-based authentication is enabled

D : Route-based authentication is enabled

Answer: A

Question 4

Refer to the exhibit.

A user located behind the FortiGate device is trying to go to http://www.addictinggames.com (Addicting.Games). The exhibit shows the application detains and application control profile.

Based on this configuration, which statement is true?

Options :

A : Addicting.Games will be blocked, based on the Filter Overrides configuration.

B : Addicting.Games will be allowed only if the Filter Overrides action is set to Learn.

C : Addicting.Games will be allowed, based on the Categories configuration.

D : Addicting.Games will be allowed, based on the Application Overrides configuration.

Answer: D

Question 5

What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

Options :

A : Full Content inspection

B : Proxy-based inspection

C : Certificate inspection

D : Flow-based inspection

Answer: D

Higher Test Marks with Free Online FCP_FGT_AD-7.4 Exam Practice

Buying Options: