Question 1

Refer to the exhibit.

As an administrator you have created an IPS profile, but it is not performing as expected. While testing you got the output as shown in the exhibit. What could be the possible reason of the diagnose output shown in the exhibit?

Options :

A : There is a no firewall policy configured with an IPS security profile.

B : FortiGate entered into IPS fail open state.

C : Administrator entered the command diagnose test application ipsmonitor 5.

D : Administrator entered the command diagnose test application ipsmonitor 99.

Answer: A

Question 2

What are three key routing principles in SD-WAN? (Choose three.)

Options :

A : By default. SD-WAN rules are skipped if the included SD-WAN members do not have a valid route to the destination.

B : SD-WAN rules have precedence over any other type of routes.

C : Regular policy routes have precedence over SD-WAN rules.

D : By default. SD-WAN rules are skipped if only one route to the destination is available.

E : By default. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

Answer: A,B,E

Question 3

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.

Based on the exhibit, which statement is true?

Options :

A : The Underlay zone is the zone by default.

B : The Underlay zone contains no member.

C : port2 and port3 are not assigned to a zone.

D : The virtual-wan-link and overlay zones can be deleted.

Answer: A

Question 4

You have configured the below commands on a FortiGate.

What would be the impact of this configuration on FortiGate?

Options :

A : FortiGate will enable strict RPF on ail its interfaces and port1 will be enable for asymmetric routing.

B : FortiGate will enable strict RPF on all its interfaces and port1 will be exempted from RPF checks.

C : Port1 will be enabled with flexible RPF, and all other interfaces will be enabled for strict RPF

D : The global configuration will take precedence and FortiGate will enable strict RPF on all interfaces.

Answer: B

Question 5

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements about the requirements of connected physical interfaces on FortiGate are true? (Choose two.)

Options :

A : Both interfaces must have the interface role assigned.

B : Both interfaces must have directly connected routes on the routing table.

C : Both interfaces must have DHCP enabled and interfaces set to LAN and DMZ roles assigned.

D : Both interfaces must have IP addresses assigned.

Answer: B,D

Free FCP_FGT_AD-7.6 Mock Exam – Practice Online Confidently

Buying Options: