Question 1

Refer to the exhibits.

The exhibits show a diagram of a FortiGate device connected to the network, and the firewall configuration. An administrator created a Deny policy with default settings to deny Webserver access for RemoteUser2. The policy should work such that Remote-User1 must be able to access the Webserver while preventing Remote-User2 from accessing the Webserver. Which additional configuration can the administrator add to a deny firewall policy, beyond the default behavior, to block Remote-User2 from accessing the Webserver?

Options :

A : Disable match-vip in the Allow_access policy

B : Configure a One-to-One IP Pool object in a new policy.

C : Set the Destination address as Webserver in the Deny policy.

D : Set the Destination address as Deny_IP in the Allow_access policy.

Answer: C

Question 2

Which three statements about SD-WAN performance SLAs are true? (Choose three.)

Options :

A : They rely on session loss and jitter.

B : They can be measured actively or passively

C : They are applied in a SD-WAN rule lowest cost strategy

D : They monitor the state of the FortiGate device.

E : All the SLAtargets can be configured.

Answer: A,B,E

Question 3

You have configured the below commands on a FortiGate.

What would be the impact of this configuration on FortiGate?

Options :

A : FortiGate will enable strict RPF on ail its interfaces and port1 will be enable for asymmetric routing.

B : FortiGate will enable strict RPF on all its interfaces and port1 will be exempted from RPF checks.

C : Port1 will be enabled with flexible RPF, and all other interfaces will be enabled for strict RPF

D : The global configuration will take precedence and FortiGate will enable strict RPF on all interfaces.

Answer: B

Question 4

What are three key routing principles in SD-WAN? (Choose three.)

Options :

A : By default. SD-WAN rules are skipped if the included SD-WAN members do not have a valid route to the destination.

B : SD-WAN rules have precedence over any other type of routes.

C : Regular policy routes have precedence over SD-WAN rules.

D : By default. SD-WAN rules are skipped if only one route to the destination is available.

E : By default. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

Answer: A,B,E

Question 5

When configuring firewall policies which of the following is true regarding the policy ID?

Options :

A : It is mandatory to provide a policy ID while creating a firewall policy regardless of GUI or CLI.

B : A firewall policy ID identifies the order of policy execution in firewall policies.

C : You can create a policy in CLI with policy ID 0.

D : A policy ID cannot be edited once a policy is created.

Answer: D

Free FCP_FGT_AD-7.6 Mock Exam – Practice Online Confidently

Buying Options: