Online Access Free FCP_FGT_AD-7.6 Exam Questions

Refer to the exhibits. An administrator has observed the performance status outputs on an HA cluster for 55 seconds.

Which FortiGate is the primary?

• A.HQ-NGFW-1 with the parameter override setting
• B.HQ-NGFW-2 with the parameter priority setting
• C.HQ-NGFW-2 with the parameter memory-failover-threshold setting
• D.HQ-NGFW-1 with the parameter memory-failover-flip-timeout setting

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

• A.NetAPI polling can increase bandwidth usage in large networks.
• B.The collector agent uses a Windows API to query DCs for user logins.
• C.The NetSessionEnum function is used to track user logouts.
• D.The collector agent must search Windows application event logs.

Refer to the exhibit. A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.

Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)

• A.On HQ-NGFW, enable Diffie-Hellman Group 2.
• B.On BR1-FGT, set Remote Address to 10.0.11.0/255.255.255.0.
• C.On HQ-NGFW. set Encryption to AES256.
• D.On BR1-FGT, set Seconds to 43200.

What are two features of collector agent advanced mode? (Choose two.)

• A.In advanced mode, FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate.
• B.In advanced mode, security profiles can be applied only to user groups, not individual users.
• C.Advanced mode uses the Windows convention -NetBios: Domain\Username.
• D.Advanced mode supports nested or inherited groups.

Refer to the exhibit. FortiGate has two separate firewall policies for Sales and Engineering to access the same web server with the same security profiles.
Which action must the administrator perform to consolidate the two policies into one?

• A.Replace port1 and port2 with the any interface in a single firewall policy.
• B.Select port1 and port2 subnets in a single firewall policy.
• C.Create an Aggregate interface that includes port1 and port2 to create a single firewall policy.
• D.Enable Multiple Interface Policies to select port1 and port2 in the same firewall policy.