FCP_FGT_AD-7.6.pdf
Q: 1
Refer to the exhibit.
As an administrator you have created an IPS profile, but it is not performing as expected. While
testing you got the output as shown in the exhibit.
What could be the possible reason of the diagnose output shown in the exhibit?
As an administrator you have created an IPS profile, but it is not performing as expected. While
testing you got the output as shown in the exhibit.
What could be the possible reason of the diagnose output shown in the exhibit?Options
Q: 2
Refer to the exhibit.
The NOC team connects to the FortiGate GUI with the NOC_Access admin profile. They request that
their GUI sessions do not disconnect too early during inactivity.
What must the administrator configure to answer this specific request from the NOC team?
The NOC team connects to the FortiGate GUI with the NOC_Access admin profile. They request that
their GUI sessions do not disconnect too early during inactivity.
What must the administrator configure to answer this specific request from the NOC team?Options
Q: 3
A remote user reports slow SSL VPN performance and frequent disconnections. The user is located in
an area with poor internet connectivity.
What setting should the administrator adjust to improve the user's experience?
Options
Q: 4
You have configured an application control profile, set peer-to-peer traffic to Block under the
Categories tab, and applied it to the firewall policy. However, your peer-to-peer traffic on known
ports is passing through the FortiGate without being blocked.
What FortiGate settings should you check to resolve this issue?
Options
Q: 5
Which two statements are true about an HA cluster? (Choose two.)
Options
Q: 6
What are three key routing principles in SD-WAN? (Choose three.)
Options
Q: 7
Refer to the exhibits. 
An administrator wants to add HQ-ISFW-2 in the Security Fabric. HQ-ISFW-2 is in the same subnet as HQ-ISFW. After configuring the Security Fabric settings on HQ-ISFW-2, the status stays Pending. What can be the two possible reasons? (Choose two.)
Options
Q: 8
An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is no inbound traffic. Which DPD mode on FortiGate meets this requirement?
Options
Q: 9
An administrator notices that some users are unable to establish SSL VPN connections, while others
can connect without any issues.
What should the administrator check first?
Options
Q: 10
Refer to the exhibit, which shows a partial configuration from the remote authentication server.
Why does the FortiGate administrator need this configuration?
Why does the FortiGate administrator need this configuration?Options
Question 1 of 10
