Free Fortinet FCP_FGT_AD-7.4 Exam Questions

Become Fortinet Certified with updated FCP_FGT_AD-7.4 exam questions and correct answers

Page: 1 / 52

Total 258 Questions | Updated On: Jun 03, 2025

Add To Cart

Question 1

Refer to the exhibits.Exhibit A shows a topology for a FortiGate HA cluster that performs proxy-based inspection on traffic. Exhibit B shows the HA configuration and the partial output of the get system ha status command.

Based on the exhibits, which two statements about the traffic passing through the cluster are true? (Choose two.)

A : For non-load balanced connections, packets forwarded by the cluster to the server contain the virtual MAC address of port2 as source.

B : The traffic sourced from the client and destined to the server is sent to FGT-1.

C : The cluster can load balance ICMP connections to the secondary.

D : For load balanced connections, the primary encapsulates TCP SYN packets before forwarding them to the secondary.

Answer: A,D

Question 2

Which CLI command allows administrators to troubleshoot Layer 2 issues, such as an IP address conflict?

A : get system status

B : diagnose sys top

C : get system performance status

D : get system arp

Answer: D

Question 3

Which three criteria can FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

A : Services defined in the firewall policy

B : Highest to lowest priority defined in the firewall policy

C : Destination defined as Internet Services in the firewall policy

D : Lowest to highest policy ID number

E : E. Source defined as Internet Services in the firewall policy

Answer: A,C,E

Question 4

Which statements about the firmware upgrade process on an active-active HA cluster are true? (Choose two.)

A : The firmware image must be manually uploaded to each FortiGate.

B : Only secondary FortiGate devices are rebooted.

C : Uninterruptable upgrade is enabled by default.

D : Traffic load balancing is temporally disabled while upgrading the firmware.

Answer: C,D

Question 5

Refer to the exhibit.

Which contains a network diagram and routing table output. The Student is unable to access Webserver.

What is the cause of the problem and what is the solution for the problem?

A : The first packet sent from Student failed the RPF check. This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.

B : The first reply packet for Student failed the RPF check. This issue can be resolved by adding a static route to 10.0.4.0/24 through wan1.

C : The first reply packet for Student failed the RPF check. This issue can be resolved by adding a static route to 203.0.114.24/32 through port3.

D : The first packet sent from Student failed the RPF check. This issue can be resolved by adding a static route to 203.0.114.24/32 through port3.

Answer: C

Page: 1 / 52

Total 258 Questions | Updated On: Jun 03, 2025

Add To Cart