Online Access Free FCP_FGT_AD-7.4 Exam Questions

Refer to exhibit.

An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.
Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

• A.On the Static URL Filter configuration set Action to Monitor
• B.On the FortiGuard Category Based Filter configuration set Action to Warning for Social Networking
• C.On the Static URL Filter configuration set Action to Exempt
• D.On the Static URL Filter configuration set Type to Simple

Which three strategies are valid SD-WAN rule strategies for member selection? (Choose three.)

• A.Lowest Quality (SLA) with load balancing
• B.Lowest Cost (SLA) with load balancing
• C.Lowest Cost (SLA) without load balancing
• D.Best Quality with load balancing
• E.Manual with load balancing

A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors.
What is the reason for the certificate warning errors?

• A.The matching firewall policy is set to proxy inspection mode
• B.The browser does not trust the certificate used by FortiGate for SSL inspection
• C.The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.
• D.The option invalid SSL certificates is set to allow on the SSL/SSH inspection profile

Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)

• A.Incremental configuration synchronization can occur only from changes made on the primary FortiGate device.
• B.Incremental configuration synchronization can occur from changes made on any FortiGate device within the HA cluster
• C.Checksums of devices are compared against each other to ensure configurations are the same.
• D.Checksums of devices will be different from each other because some configuration items are not synced to other HA members.

Which two pieces of information are synchronized between FortiGate HA members? (Choose two.)

• A.IPsec security associations
• B.DHCP leases
• C.OSPF adjacencies
• D.BGP peerings