Free Fortinet FCP_FGT_AD-7.4 Exam Questions

Become Fortinet Certified with updated FCP_FGT_AD-7.4 exam questions and correct answers

Page: 1 / 52

Total 258 Questions | Updated On: Jul 23, 2025

Add To Cart

Question 1

Which three statements about security associations (SA) in IPsec are correct? (Choose three.)

A : Phase 2 SAs are used for encrypting and decrypting the data exchanged through the tunnel.

B : An SA never expires.

C : A phase 1 SA is bidirectional, while a phase 2 SA is directional.

D : Phase 2 SA expiration can be time-based, volume-based, or both.

E : Both the phase 1 SA and phase 2 SA are bidirectional.

Answer: A,C,D

Question 2

Which of the following are purposes of NAT traversal in IPsec? (Choose two.)

A : To detect intermediary NAT devices in the tunnel path.

B : To dynamically change phase 1 negotiation mode aggressive mode.

C : To encapsulation ESP packets in UDP packets using port 4500.

D : To force a new DH exchange with each phase 2 rekey

Answer: A,C

Question 3

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements are true about the requirements of connected physical interfaces on FortiGate? (Choose two.)

A : Both interfaces must have the interface role assigned

B : Both interfaces must have directly connected routes on the routing table

C : Both interfaces must have DHCP enabled

D : Both interfaces must have IP addresses assigned

Answer: B,D

Question 4

FortiGate is configured for firewall authentication. When attempting to access an external website, the user is not presented with a login prompt.What is the most likely reason for this situation?

A : No matching user account exists for this user.

B : The user is using a guest account profile.

C : The user was authenticated using passive authentication.

D : The user is using a super admin account.

Answer: C

Question 5

If the Issuer and Subject values are the same in a digital certificate, to which type of entity was the certificate issued?

A : A subordinate CA

B : A root CA

C : A user

D : A CRL

Answer: B

Page: 1 / 52

Total 258 Questions | Updated On: Jul 23, 2025

Add To Cart