Boost Your Fortinet FCP- FortiGate 7.4 Knowledge with Free Practice Questions

Question 1

Refer to the exhibit.

Which statement about this firewall policy list is true?

AThe Implicit group can include more than one deny firewall policy.

BThe firewall policies are listed by ID sequence view.

CThe firewall policies are listed by ingress and egress interfaces pairing view.

DLAN to WAN. WAN to LAN. and Implicit are sequence grouping view lists.

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe Implicit group can include more than one deny firewall policy.

BThe firewall policies are listed by ID sequence view.

CThe firewall policies are listed by ingress and egress interfaces pairing view.

DLAN to WAN. WAN to LAN. and Implicit are sequence grouping view lists.

Question 2

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.

Based on the exhibit, which statement is true?

AThe underlay zone contains port1 and

BThe d-wan zone contains no member.

CThe d-wan zone cannot be deleted.

DThe virtual-wan-link zone contains no member.

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe underlay zone contains port1 and

BThe d-wan zone contains no member.

CThe d-wan zone cannot be deleted.

DThe virtual-wan-link zone contains no member.

Question 3

Which two statements describe how the RPF check is used? (Choose two.)

AThe RPF check is run on the first sent packet of any new session.

BThe RPF check is run on the first reply packet of any new session.

CThe RPF check is run on the first sent and reply packet of any new session.

DThe RPF check is a mechanism that protects FortiGate and the network from IP spoofing attacks.

Correct : A, D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe RPF check is run on the first sent packet of any new session.

BThe RPF check is run on the first reply packet of any new session.

CThe RPF check is run on the first sent and reply packet of any new session.

DThe RPF check is a mechanism that protects FortiGate and the network from IP spoofing attacks.

Question 5

Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

APre-shared key and certificate signature as authentication methods

BExtended authentication (XAuth)to request the remote peer to provide a username and password

CExtended authentication (XAuth) for faster authentication because fewer packets are exchanged

DNo certificate is required on the remote peer when you set the certificate signature as the authentication method

Correct : A, B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

APre-shared key and certificate signature as authentication methods

BExtended authentication (XAuth)to request the remote peer to provide a username and password

CExtended authentication (XAuth) for faster authentication because fewer packets are exchanged

DNo certificate is required on the remote peer when you set the certificate signature as the authentication method

Unlock Fortinet Mastery: FCP - FortiGate 7.4 Administrator FCP_FGT_AD-7.4 Success Awaits

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: