Online Access Free FCP_FGT_AD-7.4 Exam Questions

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

• A.The collector agent must search Windows application event logs.
• B.The collector agent uses a Windows API to query DCs for user logins.
• C.NetAPI polling can increase bandwidth usage in large networks.
• D.The NetSessionEnum function is used to track user logouts.

An organization requires remote users to send external application data running on their PCs and access FTP resources through an SSUTLS connection.
Which FortiGate configuration can achieve this goal?

• A.SSL VPN bookmark
• B.SSL VPN tunnel
• C.Zero trust network access
• D.SSL VPN quick connection

A network administrator enabled antivirus and selected an SSL inspection profile on a firewall policy.
When downloading an EICAR test file through HTTP, FortiGate detects the virus and blocks the file. When downloading the same file through HTTPS, FortiGate does not detect the and does not block the file allowing it to be downloaded.
The administrator confirms that the traffic matches the configured firewall policy.
What are two reasons for the failed virus detection by FortiGate? (Choose two.)

• A.The browser does not trust the FortiGate self-siqned CA certificate
• B.The selected SSL inspection profile has certificate inspection enabled
• C.The website is exempted from SSL inspection
• D.The EICAR test file exceeds the protocol options oversize limit

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively.
Which two statements are true about the requirements of connected physical interfaces on FortiGate? (Choose two.)

• A.Both interfaces must have DHCP enabled
• B.Both interfaces must have directly connected routes on the routing table
• C.Both interfaces must have IP addresses assigned
• D.Both interfaces must have the interface role assigned

An administrator has configured a strict RPF check on FortiGate.
How does strict RPF check work?

• A.Strict RPF allows packets back to sources with all active routes.
• B.Strict RPF checks only for the existence of at least one active route back to the source using the incoming interface.
• C.Strict RPF checks the best route back to the source using the incoming interface.
• D.Strict RPF check is run on the first sent and reply packet of any new session.