← Back to exam page

Free FCP-FGT-AD-7-6 – Fortinet FCP-FGT-AD-7-6 Practice Test Question

Loading demo links...

Showing 7–9 of 10 questions

Question 7 (Topic 1)

Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, as well as the firewall policy and IP pool configuration on the FortiGate device. Two PCs, PC1 and PC2, are connected behind FortiGate and can access the internet successfully. However, when the administrator adds a third PC to the network (PC3), the PC cannot connect to the internet. Based on the information shown in the exhibit, which two configuration options can the administrator use to fix the connectivity issue for PC3? (Choose two.)

Select an option, then click Submit answer.

  • ○ In the IP pool configuration, set type to overload.
  • ○ In the system settings, set Multiple Interface Policies to enable.
  • ○ In the firewall policy, set match-vip to enable using CLI.
  • ○ In the IP pool configuration, set endip to 100.65.0.112.
Question 8 (Topic 1)

Refer to the exhibits. FGT-1 and FGT-2 are updated with HA configuration commands shown in the exhibit. What would be the expected outcome in the HA cluster?

Select an option, then click Submit answer.

  • ○ FGT-2 will take over as the primary because it has the override enable setting and higher priority than FGT-1.
  • ○ FGT-1 will synchronize the override disable setting with FGT-2.
  • ○ The HA cluster will become out of sync because the override setting must match on all HA members.
  • ○ FGT-1 will remain the primary because FGT-2 has lower priority.
Question 9 (Topic 1)

Refer to the exhibit, which shows the IPS sensor configuration. If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

Select an option, then click Submit answer.

  • ○ The sensor will reset all connections that match these signatures.
  • ○ The sensor will gather a packet log for all matched traffic.
  • ○ The sensor will allow attackers matching the Microsoft.Windows.iSCSI.Target.DoS signature.
  • ○ The sensor will block all attacks aimed at Windows servers.