Online Access Free FCP_FGT_AD-7.4 Exam Questions

Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true? (Choose two.)

• A.If SD-WAN is disabled, you configure the load balancing algorithm in config system settings.
• B.If SD-WAN is enabled, you control the load balancing algorithm with the parameter load-balance-mode.
• C.If SD-WAN is disabled, you can configure the parameter v4-ecmp-mode to volume-based.
• D.If SD-WAN is enabled, you can configure routes with unequal distance and priority values to be part of ECMP

Which method allows management access to the FortiGate CLI without network connectivity?

• A.CLI console widget
• B.Telnet console
• C.Serial console
• D.SSH console

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.

Based on the exhibit, which statement is true?

• A.The d-wan zone cannot be deleted.
• B.The virtual-wan-link zone contains no member.
• C.The underlay zone contains port1 and
• D.The d-wan zone contains no member.

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)

• A.On Remote-FortiGate, set Seconds to 43200.
• B.On HQ-FortiGate, enable Diffie-Hellman Group 2.
• C.On HQ-FortiGate, set Encryption to AES256.
• D.On Remote-FortiGate, set Remote Address to 10.0.1.0/255.255.255.0.

Which two statements are true about the FGCP protocol? (Choose two.)

• A.FGCP is not used when FortiGate is in transparent mode
• B.FGCP runs only over the heartbeat links
• C.FGCP is used to discover FortiGate devices in different HA groups
• D.FGCP elects the primary FortiGate device