最新的Fortinet FCP - FortiGate 7.6 Administrator - FCP_FGT_AD-7.6免費考試真題
Which statement is a characteristic of automation stitches?
正確答案: D
說明：（僅 Fast2test 成員可見）
Refer to the exhibits. An administrator configured the Web Filter Profile to block access to all social networking sites except Facebook. However, when users try to access Facebook.com, they are redirected to a FortiGuard web filtering block page.
Based on the exhibits, which configuration change must the administrator make to allow Facebook while blocking all other social networking sites?
Based on the exhibits, which configuration change must the administrator make to allow Facebook while blocking all other social networking sites?
正確答案: A
說明：（僅 Fast2test 成員可見）
An administrator configured a FortiGate device to act as a collector for agentless polling mode.
What must the administrator add to the FortiGate device to retrieve AD user group information?
What must the administrator add to the FortiGate device to retrieve AD user group information?
正確答案: A
說明：（僅 Fast2test 成員可見）
An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is no inbound traffic.
Which DPD mode on FortiGate meets this requirement?
Which DPD mode on FortiGate meets this requirement?
正確答案: D
說明：（僅 Fast2test 成員可見）
Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, and the firewall policies, VIP, and IP pool configurations on the FortiGate device.
The WAN (port2) interface has the IP address 100.65.0.101/24.
The LAN (port4) interface has the IP address 10.0.11.254/24.
The first firewall policy has NAT enabled using the IP pool. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT (SNAT) the internet traffic coming from a workstation with the IP address 10.0.11.50?
The WAN (port2) interface has the IP address 100.65.0.101/24.
The LAN (port4) interface has the IP address 10.0.11.254/24.
The first firewall policy has NAT enabled using the IP pool. The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT (SNAT) the internet traffic coming from a workstation with the IP address 10.0.11.50?
正確答案: C
說明：（僅 Fast2test 成員可見）
The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile.
Which order must FortiGate use when the web filter profile has features such as safe search enabled?
Which order must FortiGate use when the web filter profile has features such as safe search enabled?
正確答案: B
說明：（僅 Fast2test 成員可見）
What are two features of the NGFW profile-based mode? (Choose two.)
正確答案: A,B
說明：（僅 Fast2test 成員可見）
When FortiGate performs SSL/SSH full inspection, you can decide how it should react when it detects an invalid certificate.
Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate? (Choose three.)
Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate? (Choose three.)
正確答案: A,B,C
說明：（僅 Fast2test 成員可見）
Refer to the exhibits. An administrator wants to add HQ-ISFW-2 in the Security Fabric. HQ-ISFW-
2 is in the same subnet as HQ-ISFW. After configuring the Security Fabric settings on HQ-ISFW-
2, the status stays Pending.
What can be the two possible reasons? (Choose two.)
2 is in the same subnet as HQ-ISFW. After configuring the Security Fabric settings on HQ-ISFW-
2, the status stays Pending.
What can be the two possible reasons? (Choose two.)
正確答案: A,C
說明：（僅 Fast2test 成員可見）