Online Access Free FCP_FGT_AD-7.6 Exam Questions

Refer to the exhibit, which shows a routing table.

An administrator wants to create a new static route so the traffic to the subnet 172.20.1.0/24 is routed through port2 only.
What are the two criteria that the administrator can use to achieve this objective? (Choose two.)

• A.The existing static route through port3 must have the distance set to 11.
• B.The new static route must have the distance set to 9.
• C.The new static route must have the metric set to 1.
• D.The new static route must have the priority set to 3.

Refer to the exhibits. An administrator configured the Web Filter Profile to block access to all social networking sites except Facebook. However, when users try to access Facebook.com, they are redirected to a FortiGuard web filtering block page.
Based on the exhibits, which configuration change must the administrator make to allow Facebook while blocking all other social networking sites?

• A.Set the Social Networking action as warning in the FortiGuard Category Based Filter.
• B.Change the type as Simple in the Static URL Filter section.
• C.Change the Feature set of Web Filter Profile as Proxy-based.
• D.Set the Action as Exempt for www.facebook.com in the Static URL Filter.

Which two statements describe characteristics of automation stitches? (Choose two.)

• A.Multiple actions can run in parallel.
• B.Triggers can involve external connectors.
• C.An automation stitch can have multiple triggers.
• D.Actions involve only devices included in the Security Fabric.

Which three methods are used by the collector agent for AD polling? (Choose three.)

• A.NetAPI
• B.WinSecLog
• C.FortiGate polling
• D.FSSO REST API
• E.WMI

Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

• A.Pre-shared key and certificate signature as authentication methods
• B.Extended authentication (XAuth) to request the remote peer to provide a username and password
• C.Extended authentication (XAuth) for faster authentication because fewer packets are exchanged
• D.No certificate is required on the remote peer when you set the certificate signature as the authentication method