Free Fortinet FCSS_EFW_AD-7.4 Exam Questions

Question 1

Which two statements about OCVPN are true? (Choose two.)

A : Only root vdom supports OCVPN.

B : OCVPN supports static and dynamic IPs in WAN interface.

C : OCVPN offers only Hub-Spoke VPNs.

D : FortiGate devices under different FortiCare accounts can be used to form OCVPN.

Answer: A,B

Question 2

Refer to the exhibit, which contains the output of a web filtering diagnose command.Which statement explains why the cache statistics are all zeros?

A : The FortiGate web filter cache is disabled in the FortiGate configuration.

B : FortiGate is using flow-based inspection which does not use the cache.

C : The administrator has reallocated the cache memory to a separate process.

D : There are no users making web requests.

Answer: A

Question 3

Refer to the exhibit, which shows a command output.FortiGate_A and FortiGate_B are members of an FGSP cluster in an enterprise network. While testing the cluster using the ping command, the administrator monitors packet loss and found that the session output on FortiGate_B is as shown in the exhibit. What could be the cause of this output on FortiGate_B?

A : The session synchronization is encrypted.

B : session-pickup-connectionless is set to disable on FortiGate_B.

C : FortiGate_B is configured in passive mode.

D : FortiGate_A and FortiGate_B have the same standalone-group-id value.

Answer: B

Question 4