Online Access Free FCP_FGT_AD-7.6 Exam Questions

Refer to the exhibits.

Based on the current HA status, an administrator updates the override and priority parameters on HQ-NGFW-
1 and HQ-NGFW-2 as shown in the exhibit.
What would be the expected outcome in the HA cluster?

• A.HQ-NGFW-1 will remain the primary because HQ-NGFW-2 has lower priority.
• B.HQ-NGFW-1 will synchronize the override disable setting with HQ-NGFW-2.
• C.HQ-NGFW-2 will take over as the primary because it has the override enable setting and higher priority than HQ-NGFW-1.
• D.The HA cluster will become out of sync because the override setting must match on all HA members.

You have created a web filter profile named restrict_media-profile with a daily category usage quota.
When you are adding the profile to the firewall policy, the restrict_media-profile is not listed in the available web profile drop down.
What could be the reason?

• A.The web filter profile is already referenced in another firewall policy.
• B.The inspection mode in the firewall policy is not matching with web filter profile feature set.
• C.The naming convention used in the web filter profile is restricting it in the firewall policy.
• D.The firewall policy is in no-inspection mode instead of deep-inspection.

Which three statements about SD-WAN performance SLAs are true? (Choose three.)

• A.They rely on session loss and jitter.
• B.They are applied in a SD-WAN rule lowest cost strategy.
• C.They monitor the state of the FortiGate device.
• D.They can be measured actively or passively.
• E.All the SLAtargets can be configured.

Refer to the exhibit.

An administrator has configured an Application Overrides for the ABC.Com application signature and set the Action to Allow. This application control profile is then applied to a firewall policy that is scanning all outbound traffic. Logging is enabled in the firewall policy. To test the configuration, the administrator accessed the ABC.Com web site several times.
Why are there no logs generated under security logs for ABC.Com?

• A.The ABC.Com Type is set as Application instead of Filter.
• B.The ABC.Com is hitting the category Excessive-Bandwidth.
• C.The ABC.Com Action is set to Allow.
• D.The ABC.Com is configured under application profile, which must be configured as a web filter profile.

You have configured an application control profile, set peer-to-peer traffic to Block under the Categories tab, and applied it to the firewall policy. However, your peer-to-peer traffic on known ports is passing through the FortiGate without being blocked.
What FortiGate settings should you check to resolve this issue?

• A.Application and Filter Overrides
• B.Replacement Messages for UDP-based Applications
• C.Network Protocol Enforcement
• D.FortiGuard category ratings