Free FCP – FortiGate 7.4 Administrator Exam FCP_FGT_AD-7.4 Exam Practice Test

Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

• The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.
• The server FortiGate requires a CA certificate to verify the client FortiGate certificate.
• The client FortiGate requires a client certificate signed by the CA on the server FortiGate.
• The client FortiGate requires a manually added route to remote subnets.

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile.Which order must FortiGate use when the web filter profile has features such as safe search enabled?

• FortiGuard category filter and rating filter
• Static domain filter, SSL inspection filter, and external connectors filters
• DNS-based web filter and proxy-based web filter
• Static URL filter, FortiGuard category filter, and advanced filters

When FortiGate performs SSL/SSH full inspection, you can decide how it should react when it detects an invalid certificate.Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate? (Choose three.)

• Allow & Warning
• Trust & Allow
• Allow
• Block & Warning
• Block

Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true? (Choose two.)

• If SD-WAN is enabled, you control the load balancing algorithm with the parameter load-balance- mode.
• If SD-WAN is disabled, you can configure the parameter v4-ecmp-mode to volume-based.
• If SD-WAN is enabled, you can configure routes with unequal distance and priority values to be part of ECMP
• If SD-WAN is disabled, you configure the load balancing algorithm in config system settings.

A network administrator has configured an SSL/SSH inspection profile defined for full SSL inspection and set with a private CA certificate. The firewall policy that allows the traffic uses this profile for SSL inspection and performs web filtering. When visiting any HTTPS websites, the browser reports certificate warning errors.What is the reason for the certificate warning errors?The SSL cipher compliance option is not enabled on the SSL inspection profile. This setting is required when the SSL inspection profile is defined with a private CA certificate.The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.The browser does not recognize the certificate in use as signed by a trusted C

• With full SSL inspection it is not possible to avoid certificate warning errors at the browser level.

Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)

• Checksums of devices are compared against each other to ensure configurations are the same.
• Incremental configuration synchronization can occur only from changes made on the primary FortiGate device.
• Incremental configuration synchronization can occur from changes made on any FortiGate device within the HA cluster
• Checksums of devices will be different from each other because some configuration items are not synced to other HA members.

An administrator must enable a DHCP server on one of the directly connected networks on FortiGate. However, the administrator is unable to complete the process on the GUI to enable the service on the interface.In this scenario, what prevents the administrator from enabling DHCP service?

• The role of the interface prevents setting a DHCP server.
• The DHCP server setting is available only on the CLI.
• Another interface is configured as the only DHCP server on FortiGate.
• The FortiGate model does not support the DHCP server.

An administrator configured a FortiGate to act as a collector for agentless polling mode.What must the administrator add to the FortiGate device to retrieve AD user group information?

• LDAP server
• RADIUS server
• DHCP server
• Windows server

Which three methods are used by the collector agent for AD polling? (Choose three.)

• WinSecLog
• WMI
• NetAPI
• FSSO REST API
• FortiGate polling

Which three strategies are valid SD-WAN rule strategies for member selection? (Choose three.)

• Manual with load balancing
• Lowest Cost (SLA) with load balancing
• Best Quality with load balancing
• Lowest Quality (SLA) with load balancing
• Lowest Cost (SLA) without load balancing