최신 FCP_FGT_AD-7.4 무료덤프 - Fortinet FCP

문제1

What is the primary FortiGate election process when the HA override setting is disabled?

A. Connected monitored ports > System uptime > Priority > FortiGate serial number

B. Connected monitored ports > Priority > System uptime > FortiGate serial number

C. Connected monitored ports > HA uptime > Priority > FortiGate serial number

D. Connected monitored ports > Priority > HA uptime > FortiGate serial number

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Which three strategies are valid SD-WAN rule strategies for member selection? (Choose three.)

A. Best Quality with load balancing

B. Lowest Quality (SLA) with load balancing

C. Manual with load balancing

D. Lowest Cost (SLA) with load balancing

E. Lowest Cost (SLA) without load balancing

정답: A,C,D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

Which statement about the deployment of the Security Fabric in a multi-VDOM environment is true?

A. Downstream devices can connect to the upstream device from any of their VDOMs

B. Security rating reports can be run individually for each configured VDOM

C. VDOMs without ports with connected devices are not displayed in the topology

D. Each VDOM in the environment can be part of a different Security Fabric

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command shown in the exhibit.
If option 5 is used with the IPS diagnostic command and the outcome is a decrease in the CPU usage, what is the correct conclusion?

A. The IPS engine is blocking all traffic.

B. The IPS engine is inspecting a high volume of traffic.

C. The IPS engine will continue to run in a normal state.

D. The IPS engine is unable to prevent an intrusion attack.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true? (Choose two.)

A. If SD-WAN is enabled, you can configure routes with unequal distance and priority values to be part of ECMP

B. If SD-WAN is disabled, you configure the load balancing algorithm in config system settings.

C. If SD-WAN is disabled, you can configure the parameter v4-ecmp-mode to volume-based.

D. If SD-WAN is enabled, you control the load balancing algorithm with the parameter load-balance-mode.

정답: B,D

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Refer to the exhibits.

The SSL VPN connection fails when a user attempts to connect to it.
What should the user do to successfully connect to the SSL VPN?

A. Change the SSL VPN port on the client.

B. Change the server IP address.

C. Change the SSL VPN portal to the tunnel.

D. Change the idle timeout.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제7

What are two features of FortiGate FSSO agentless polling mode? (Choose two.)

A. FortiGate does not support workstation check.

B. FortiGate uses the AD server as the collector agent.

C. FortiGate directs the collector agent to use a remote LDAP server.

D. FortiGate uses the SMB protocol to read the event viewer logs from the DCs.

정답: A,D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Which three statements about SD-WAN zones are true? (Choose three.)

A. An SD-WAN zone can contain physical and logical interfaces

B. You can define up to three SD-WAN zones per FortiGate device

C. An SD-WAN zone must contains at least two members

D. An SD-WAN zone is a logical grouping of members

E. You can use an SD-WAN zone in static route definitions

정답: A,D,E

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Refer to the exhibits, which show a diagram of a FortiGate device connected to the network. VIP object configuration, and the firewall policy configuration.

The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IP address
10.0.1.254/24.
If the host 10.200.3.1 sends a TCP SYN packet on port 8080 to 10.200.1.10, what will the source address, destination address, and destination port of the packet be at the time FortiGate forwards the packet to the destination?

A. 10.0.1.254, 10.0.1.10, and 80, respectively

B. 10.0.1.254, 10.200.1.10, and 8080, respectively

C. 10.200.3.1, 10.0.1.10, and 80, respectively

D. 10.200.3.1, 10.0.1.10, and 8080, respectively

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

최신 FCP_FGT_AD-7.4 무료덤프 - Fortinet FCP - FortiGate 7.4 Administrator

우리와 연락하기

유용한 링크

최신 업데이트