FCP_FGT_AD-7.6試験無料問題集（132題）「Fortinet FCP

出題：1

Refer to the exhibit to view the firewall policy.

Why would the firewall policy not block a well-known virus, for example eicar?

A. Web filter is not enabled on the firewall policy to complement the antivirus profile.

B. The firewall policy does not apply deep content inspection.

C. The action on the firewall policy is not set to deny.

D. The firewall policy is not configured in proxy-based inspection mode.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects.

The WAN (port2) interface has the IP address 100.65.0.101/24. The LAN (port4) interface has the IP address 10.0.11.254/24. Which IP address will be used to source NAT (SNAT) the traffic, if the user on HQ-PC-1 (10.0.11.50) pings the IP address of BR-FGT (100.65.1.111)

A. 100.65.0.149

B. 100.65.0.49

C. 100.65.0.99

D. 100.65.0.101

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

You are analyzing connectivity problems caused by intermediate devices blocking traffic in SSL VPN environment.
In which two ways can you effectively resolve the problem? (Choose two.)

A. You can turn off IKE fragmentation to fix large certificate negotiation problems.

B. You can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports.

C. You can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500).

D. You should use IPsec to solve issues with fragment drops and large certificate exchanges.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings.
What is true about the DNS connection to a FortiGuard server?

A. It uses DNS over TLS.

B. It uses UDP 53.

C. It uses DNS over HTTPS.

D. It uses UDP 8888.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which two statements about the Security Fabric rating are true? (Choose two.)

A. A license is required to obtain an executive summary in the Security Rating section.

B. The Security Posture category provides PCI compliance results.

C. The root FortiGate provides executive summaries of all the FortiGate devices in the Security Fabric.

D. Security Rating Insights are available only in the Security Rating page.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, and the firewall policies, VIP, and IP pool configurations on the FortiGate device.
The WAN (port2) interface has the IP address 100.65.0.101/24.
The LAN (port4) interface has the IP address 10.0.11.254/24.
The first firewall policy has NAT enabled using the IP pool. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT (SNAT) the internet traffic coming from a workstation with the IP address 10.0.11.50?

A. 100.65.0.102

B. 10.0.11.254

C. 100.65.0.101

D. 100.65.0.200

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Refer to the exhibits. An administrator configured both members of an HA cluster at the same time. After one week of monitoring, the administrator wants to verify the HA failover performance.
How can the administrator force a failover?

A. The administrator must set the monitored port to down on HQ-NGFW-1.

B. The administrator must reset the HA uptime on HQ-NGFW-1.

C. The administrator must set the parameter override to enable on HQ-NGFW-2.

D. The administrator must increase the HA priority on HQ-NGFW-2.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Refer to the exhibit, which shows a firewall policy to enable active authentication.

When attempting to access an external website using an active authentication method, the user is not presented with a login prompt.
What is the most likely reason for this situation?

A. The Service DNS is required in the firewall policy.

B. The Remote-users group must be set up correctly in the FSSO configuration.

C. No matching user account exists for this user.

D. The Remote-users group is not added to the Destination.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Refer to the exhibit, which shows a routing table.

An administrator wants to create a new static route so the traffic to the subnet 172.20.1.0/24 is routed through port2 only.
What are the two criteria that the administrator can use to achieve this objective? (Choose two.)

A. The new static route must have the distance set to 9.

B. The existing static route through port3 must have the distance set to 11.

C. The new static route must have the priority set to 3.

D. The new static route must have the metric set to 1.

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

Refer to the exhibit.

Which statement about this firewall policy list is true?

A. The firewall policies are listed by ID sequence view.

B. The firewall policies are listed by ingress and egress interfaces pairing view.

C. The Implicit group can include more than one deny firewall policy.

D. LAN to WAN, WAN to LAN, and Implicit are sequence grouping view lists.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

FCP_FGT_AD-7.6試験無料問題集「Fortinet FCP - FortiGate 7.6 Administrator 認定」