FCP_FGT_AD-7.4無料問題集「Fortinet FCP - FortiGate 7.4 Administrator」

質問 1

A FortiGate firewall policy is configured with active authentication however, the user cannot authenticate when accessing a website.
Which protocol must FortiGate allow even though the user cannot authenticate?

（A）ICMP

（B）DNS

（C）LDAP

（D）DHCP

正解：B 解答を投票する

質問 2

Refer to the exhibits.

The exhibits show a diagram of a FortiGate device connected to the network, and the firewall configuration.
An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2.
The policy should work such that Remote-User1 must be able to access the Webserver while preventing Remote-User2 from accessing the Webserver.
Which two configuration changes can the administrator make to the policy to deny Webserver access for Remote-User2? (Choose two.)

（A）Set the Destination address as Deny_IP in the Allow_access policy.

（B）Enable match-vip in the Deny policy.

（C）Set the Destination address as Webserver in the Deny policy.

（D）Disable match-vip in the Deny policy.

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

（A）Internet Service Database (ISDB) engine

（B）Antivirus engine

（C）Application control engine

（D）Intrusion prevention system engine

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

What are two features of collector agent advanced mode? (Choose two.)

（A）In advanced mode, FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate.

（B）Advanced mode uses the Windows convention -NetBios: Domain\Username.

（C）Advanced mode supports nested or inherited groups.

（D）In advanced mode, security profiles can be applied only to user groups, not individual users.

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which three CLI commands, can you use to troubleshoot Layer 3 issues if the issue is in neither the physical layer nor the link layer? (Choose three.)

（A）execute traceroute

（B）diagnose sys top

（C）diagnose sniffer packet any

（D）execute ping

（E）get system arp

正解：A、D、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

（A）The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.

（B）The client FortiGate requires a client certificate signed by the CA on the server FortiGate.

（C）The server FortiGate requires a CA certificate to verify the client FortiGate certificate.

（D）The client FortiGate requires a manually added route to remote subnets.

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Refer to the exhibit, which shows the IPS sensor configuration.

If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

（A）The sensor will block all attacks aimed at Windows servers.

（B）The sensor will allow attackers matching the Microsoft.Windows.iSCSl.Target.DoS signature.

（C）The sensor will reset all connections that match these signatures.

（D）The sensor will gather a packet log for all matched traffic.

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which inspection mode does FortiGate use for application profiles if it is configured as a profile-based next-generation firewall (NGFW)?

（A）Flow-based inspection

（B）Certificate inspection

（C）Full content inspection

（D）Proxy-based inspection

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true? (Choose two.)

（A）If SD-WAN is disabled, you configure the load balancing algorithm in config system settings.

（B）If SD-WAN is enabled, you can configure routes with unequal distance and priority values to be part of ECMP

（C）If SD-WAN is enabled, you control the load balancing algorithm with the parameter load-balance-mode.

（D）If SD-WAN is disabled, you can configure the parameter v4-ecmp-mode to volume-based.

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

FCP_FGT_AD-7.4 無料問題集「Fortinet FCP - FortiGate 7.4 Administrator」

弊社を連絡する

関連リンク

トップ試験