FCP_FGT_AD-7.4試験無料問題集（91題）「Fortinet FCP

出題：1

An administrator must enable a DHCP server on one of the directly connected networks on FortiGate. However, the administrator is unable to complete the process on the GUI to enable the service on the interface.
In this scenario, what prevents the administrator from enabling DHCP service?

A. The FortiGate model does not support the DHCP server.

B. Another interface is configured as the only DHCP server on FortiGate.

C. The DHCP server setting is available only on the CLI.

D. The role of the interface prevents setting a DHCP server.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Refer to the exhibits.

The exhibits show the application sensor configuration and the Excessive-Bandwidth and Apple filter details.
Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?

A. Apple FaceTime will be allowed, based on the Apple filter configuration.

B. Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration.

C. Apple FaceTime will be allowed only if the Apple filter in Application and Filter Overrides is set to Allow.

D. Apple FaceTime will be allowed, based on the Video/Audio category configuration.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

A. The server FortiGate requires a CA certificate to verify the client FortiGate certificate.

B. The client FortiGate requires a manually added route to remote subnets.

C. The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.

D. The client FortiGate requires a client certificate signed by the CA on the server FortiGate.

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which three statements explain a flow-based antivirus profile? (Choose three.)

A. If a virus is detected, the last packet is delivered to the client.

B. FortiGate buffers the whole file but transmits to the client at the same time.

C. The IPS engine handles the process as a standalone.

D. Flow-based inspection optimizes performance compared to proxy-based inspection

E. Flow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection

正解：B,D,E 解答を投票する

出題：5

An administrator configured a FortiGate to act as a collector for agentless polling mode.
What must the administrator add to the FortiGate device to retrieve AD user group information?

A. DHCP server

B. RADIUS server

C. LDAP server

D. Windows server

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which two statements explain antivirus scanning modes? (Choose two.)

A. In flow-based inspection mode, FortiGate buffers the file, but also simultaneously transmits it to the client.

B. In flow-based inspection mode files bigger than the buffer size are scanned

C. In proxy-based inspection mode antivirus scanning buffers the whole file for scanning, before sending it to the client

D. In proxy-based inspection mode files bigger than the buffer size are scanned

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which three methods are used by the collector agent for AD polling? (Choose three.)

A. WMI

B. FSSO REST API

C. FortiGate polling

D. WinSecLog

E. NetAPI

正解：A,D,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

What are two features of the NGFW profile-based mode? (Choose two.)

A. NGFW profile-based mode can only be applied globally and not on individual VDOMs.

B. NGFW profile-based mode supports applying applications and web filtering profiles in a firewall policy.

C. NGFW profile-based mode policies support both flow inspection and proxy inspection.

D. NGFW profile-based mode must require the use of central source NAT policy

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors.
What is the reason for the certificate warning errors?

A. The matching firewall policy is set to proxy inspection mode

B. The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.

C. The browser does not trust the certificate used by FortiGate for SSL inspection

D. The option invalid SSL certificates is set to allow on the SSL/SSH inspection profile

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

FCP_FGT_AD-7.4試験無料問題集「Fortinet FCP - FortiGate 7.4 Administrator 認定」