Free Fortinet FCP_FGT_AD-7.4 Exam Questions

Question 1

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements are true about the requirements of connected physical interfaces on FortiGate? (Choose two.)

A : Both interfaces must have the interface role assigned

B : Both interfaces must have directly connected routes on the routing table

C : Both interfaces must have DHCP enabled

D : Both interfaces must have IP addresses assigned

Answer: B,D

Question 2

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements are true about the requirements of connected physical interfaces on FortiGate? (Choose two.)

A : Both interfaces must have the interface role assigned

B : Both interfaces must have directly connected routes on the routing table

C : Both interfaces must have DHCP enabled

D : Both interfaces must have IP addresses assigned

Answer: B,D

Question 3

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements are true about the requirements of connected physical interfaces on FortiGate? (Choose two.)

A : Both interfaces must have the interface role assigned

B : Both interfaces must have directly connected routes on the routing table

C : Both interfaces must have DHCP enabled

D : Both interfaces must have IP addresses assigned

Answer: B,D

Question 4

Refer to the exhibits.The exhibits show a firewall policy (Exhibit A) and an antivirus profile (Exhibit B).

Why is the user unable to receive a block replacement message when downloading an infected file for the first time?

A : The volume of traffic being inspected is too high for this model of FortiGate.

B : The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.

C : The firewall policy performs the full content inspection on the file.

D : The flow-based inspection is used, which resets the last packet to the user.

Answer: D

Question 5

Which certificate value can FortiGate use to determine the relationship between the issuer and the certificate?

A : Subject Key Identifier value

B : SMMIE Capabilities value

C : Subject value

D : Subject Alternative Name value

Answer: A