FCP_FGT_AD-7.4無料問題集「Fortinet FCP - FortiGate 7.4 Administrator」

質問 1

Refer to the exhibit.

In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output shown in the exhibit.
What should the administrator do next, to troubleshoot the problem?

（A）Run a sniffer on the web server.

（B）Execute another sniffer on FortiGate, this time with the filter "hose 10.o.1.10".

（C）Execute a debug flow.

（D）Capture the traffic using an external sniffer connected to part1.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

When FortiGate performs SSL/SSH full inspection, you can decide how it should react when it detects an invalid certificate.
Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate?
(Choose three.)

（A）Allow & Warning

（B）Block

（C）Allow

（D）Trust & Allow

（E）Block & Warning

正解：A、B、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Refer to the exhibits, which show the firewall policy and the security profile for Facebook.

Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts.
Which part of the configuration must you change to resolve the issue?

（A）Get the additional application signatures required to add to the security policy

（B）Make the SSL inspection a deep content inspection

（C）Disable HTTP redirect to HTTPS on the web browser

（D）Add Facebook to the URL category in the security policy

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Refer to the exhibit.

Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit.
What do you conclude when adding the FTP.Login.Failed signature to the IPS sensor profile?

（A）The signature setting includes a group of other signatures.

（B）Traffic matching the signature will be allowed and logged.

（C）The signature setting uses a custom rating threshold.

（D）Traffic matching the signature will be silently dropped and logged.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.

Based on the exhibit, which statement is true?

（A）The d-wan zone cannot be deleted.

（B）The d-wan zone contains no member.

（C）The virtual-wan-link zone contains no member.

（D）The underlay zone contains port1 and

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

FortiGate is integrated with FortiAnalyzer and FortiManager.
When a firewall policy is created, which attribute is added to the policy to improve functionality and to support recording logs to FortiAnalyzer or FortiManager?

（A）Log ID

（B）Sequence ID

（C）Policy ID

（D）Universally Unique Identifier

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Which statement about the deployment of the Security Fabric in a multi-VDOM environment is true?

（A）VDOMs without ports with connected devices are not displayed in the topology

（B）Security rating reports can be run individually for each configured VDOM

（C）Each VDOM in the environment can be part of a different Security Fabric

（D）Downstream devices can connect to the upstream device from any of their VDOMs

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Refer to the exhibits.

The exhibits show a diagram of a FortiGate device connected to the network, as well as the IP pool configuration and firewall policy objects.
The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IPaddress
10.0.1.254/24.
Which IP address will be used to source NAT (SNAT) the traffic, if the user on Local-Client (10.0.1.10) pings the IP address of Remote-FortiGate (10.200.3.1)?

（A）10.200.1.99

（B）10.200.1.1

（C）10.200.1.49

（D）10.200.1.149

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

（A）The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.

（B）The client FortiGate requires a client certificate signed by the CA on the server FortiGate.

（C）The server FortiGate requires a CA certificate to verify the client FortiGate certificate.

（D）The client FortiGate requires a manually added route to remote subnets.

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

FCP_FGT_AD-7.4 無料問題集「Fortinet FCP - FortiGate 7.4 Administrator」

弊社を連絡する

関連リンク

トップ試験