Free FCP – FortiGate 7.4 Administrator Exam FCP_FGT_AD-7.4 Exam Practice Test

An administrator configured a FortiGate to act as a collector for agentless polling mode.What must the administrator add to the FortiGate device to retrieve AD user group information?

• LDAP server
• RADIUS server
• DHCP server
• Windows server

Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true? (Choose two.)

• If SD-WAN is enabled, you control the load balancing algorithm with the parameter load-balance- mode.
• If SD-WAN is disabled, you can configure the parameter v4-ecmp-mode to volume-based.
• If SD-WAN is enabled, you can configure routes with unequal distance and priority values to be part of ECMP
• If SD-WAN is disabled, you configure the load balancing algorithm in config system settings.

Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

• The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.
• The server FortiGate requires a CA certificate to verify the client FortiGate certificate.
• The client FortiGate requires a client certificate signed by the CA on the server FortiGate.
• The client FortiGate requires a manually added route to remote subnets.

Which three strategies are valid SD-WAN rule strategies for member selection? (Choose three.)

• Manual with load balancing
• Lowest Cost (SLA) with load balancing
• Best Quality with load balancing
• Lowest Quality (SLA) with load balancing
• Lowest Cost (SLA) without load balancing

When FortiGate performs SSL/SSH full inspection, you can decide how it should react when it detects an invalid certificate.Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate? (Choose three.)

• Allow & Warning
• Trust & Allow
• Allow
• Block & Warning
• Block

An administrator configures FortiGuard servers as DNS servers on FortiGate using default settings. What is true about the DNS connection to a FortiGuard server?

• It uses UDP 8888.
• It uses DNS over HTTPS.
• It uses DNS over TLS.
• It uses UDP 53.

What are two features of the NGFW profile-based mode? (Choose two.)

• NGFW profile-based mode can only be applied globally and not on individual VDOMs.
• NGFW profile-based mode must require the use of central source NAT policy
• NGFW profile-based mode policies support both flow inspection and proxy inspection.
• NGFW profile-based mode supports applying applications and web filtering profiles in a firewall policy.

Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)

• Checksums of devices are compared against each other to ensure configurations are the same.
• Incremental configuration synchronization can occur only from changes made on the primary FortiGate device.
• Incremental configuration synchronization can occur from changes made on any FortiGate device within the HA cluster
• Checksums of devices will be different from each other because some configuration items are not synced to other HA members.

What are two features of collector agent advanced mode? (Choose two.)

• In advanced mode, FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate.
• Advanced mode supports nested or inherited groups.
• In advanced mode, security profiles can be applied only to user groups, not individual users.
• Advanced mode uses the Windows convention —NetBios: Domain\Username.

Which two statements describe how the RPF check is used? (Choose two.)

• The RPF check is run on the first sent packet of any new session.
• The RPF check is run on the first reply packet of any new session.
• The RPF check is run on the first sent and reply packet of any new session.
• The RPF check is a mechanism that protects FortiGate and the network from IP spoofing attacks.