Question 1

Refer to the exhibit, which shows theADVPNIPsec interface representing the VPN IPsec phase 1 from Hub A to Spoke 1 and Spoke 2, and from Hub # to Spoke 3 and Spoke 4.

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2. What must the administrator configure in the phase 1 VPN IPsec configuration of theADVPNtunnels?

Options :

A : set auto-discovery-sender enable and set network-id x

B : set auto-discovery-forwarder enable and set remote-as x

C : set auto-discovery-crossover enable and set enforce-multihop enable

D : set auto-discovery-receiver enable and set npu-offload enable

Answer: C

Question 2

Refer to the exhibit, which contains the output of a web filtering diagnose command.

Which statement explains why the cache statistics are all zeros?

Options :

A : The FortiGate web filter cache is disabled in the FortiGate configuration.

B : FortiGate is using flow-based inspection which does not use the cache.

C : The administrator has reallocated the cache memory to a separate process.

D : There are no users making web requests.

Answer: A

Question 3

Refer to the exhibit, which shows a command output.

FortiGate_A and FortiGate_B are members of an FGSP cluster in an enterprise network. While testing the cluster using the ping command, the administrator monitors packet loss and found that the session output on FortiGate_B is as shown in the exhibit. What could be the cause of this output on FortiGate_B?

Options :

A : The session synchronization is encrypted.

B : session-pickup-connectionless is set to disable on FortiGate_B.

C : FortiGate_B is configured in passive mode.

D : FortiGate_A and FortiGate_B have the same standalone-group-id value.

Answer: B

Question 4

Refer to the exhibit, which shows the output of a debug command.

What can be concluded from the debug command output?

Options :

A : The OSPF router with the ID 0.0.0.69 has its OSPF priority set to 0.

B : The local FortiGate has a different MTU value from the OSPF router with ID 0.0.0.2, based on the state information.

C : There are more than two OSPF routers on the wan2 network.

D : The interface ToRemote is a broadcast OSPF network.

Answer: C

Question 5

What does hyperscale capability in data center firewalls typically support?

Options :

A : Enhanced encryption and decryption processes only

B : Network speeds ranging from 10 Gbps to 1000 Gbps

C : Application layer operations such as intrusion prevention

D : Bundling of multiple physical interfaces for a single logical interface

Answer: B

Higher Test Marks with Free Online FCSS_EFW_AD-7.4 Exam Practice

Buying Options: