Exam FCP_FGT_AD-7.4: FCP – FortiGate 7.4 Administrator
| Exam Number: FCP_FGT_AD-7.4 | Length of test: 105 mins |
| Exam Name: FCP – FortiGate 7.4 Administrator | Number of questions in the actual exam: 60 |
| Format: PDF, VPLUS | Passing Score: 70% |
Total Questions: 86
FREE
Premium VPLUS file
Download practice test questions
| Title | Size | Hits | Download |
|---|---|---|---|
| Fortinet.Premium.FCP_FGT_AD-7.4.47q - DEMO | 13.58 MB | 69 | Download |
| Fortinet.FCP_FGT_AD-7.4.by.David.23q | 1.82 MB | 76 | Download |
Some new questions:
Q
Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?
A. Internet Service Database (ISDB) engine
B. Intrusion prevention system engine
C. Antivirus engine
D. Application control engine
Q
A FortiGate firewall policy is configured with active authentication however, the user cannot authenticate when accessing a website.
Which protocol must FortiGate allow even though the user cannot authenticate?
A. ICMP
B. DNS
C. DHCP
D. LDAP
Q
There are multiple dial-up IPsec VPNs configured in aggressive mode on the HQ FortiGate. The requirement is to connect dial-up users to their respective department VPN tunnels.
Which phase 1 setting you can configure to match the user to the tunnel?
A. Peer ID
B. Local Gateway
C. Dead Peer Detection
D. IKE Mode Config
Q
An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is outbound traffic but no response from the peer.
Which DPD mode on FortiGate meets this requirement?
A. On Demand
B. On Idle
C. Disabled
D. Enabled
…………
When more rate than 80%?
Hi,
You should wait new version of premium exam FCP_FGT_AD-7.4.
Thanks
For a new Fortinet exam version or will you update the current premium file?. In this case, will be notified?
Hi,
If we have new version of exam FCP_FGT_AD-7.4, we will upload it.
You can send mail or chat to us, we will check it and reply to you.
Thanks
Are these questions will be in the exam?
Hi,
You have rate +85%.
tks
Some questions:
Q
Refer to the exhibit to view the firewall policy.
Why would the firewall policy not block a well-known virus, for example eicar?
A. The action on the firewall policy is not set to deny.
B. The firewall policy is not configured in proxy-based inspection mode.
C. Web filter is not enabled on the firewall policy to complement the antivirus profile.
D. The firewall policy does not apply deep content inspection.
Q
Which inspection mode does FortiGate use for application profiles if it is configured as a profile-based next-generation firewall (NGFW)?
A. Full content inspection
B. Proxy-based inspection
C. Certificate inspection
D. Flow-based inspection
Q
The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile.
Which order must FortiGate use when the web filter profile has features such as safe search enabled?
A. FortiGuard category filter and rating filter
B. Static domain filter, SSL inspection filter, and external connectors filters
C. DNS-based web filter and proxy-based web filter
D. Static URL filter, FortiGuard category filter, and advanced filters
Q
Refer to the exhibits.
The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects.
The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IPaddress 10.0.1.254/24.
Which IP address will be used to source NAT (SNAT) the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?
A. 10.200.1.1
B. 10.200.1.149
C. 10.200.1.99
D. 10.200.1.49
Q
What are two features of collector agent advanced mode? (Choose two.)
A. In advanced mode, FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate.
B. Advanced mode supports nested or inherited groups.
C. In advanced mode, security profiles can be applied only to user groups, not individual users.
D. Advanced mode uses the Windows convention —NetBios: Domain\Username.
Answer: A, B
……