Free Fortinet FCSS_EFW_AD-7.4 Exam Questions

Become Fortinet Certified with updated FCSS_EFW_AD-7.4 exam questions and correct answers

Page: 1 / 32

Total 159 Questions | Updated On: Dec 01, 2024

Add To Cart

Question 1

What is the diagnose test application ipsmonitor 99 command used for?

A : To enable IPS bypass mode

B : To provide information regarding IPS sessions

C : To disable the IPS engine

D : To restart all IPS engines and monitors

Answer: D

Question 2

Refer to the exhibit, which shows a command output.FortiGate_A and FortiGate_B are members of an FGSP cluster in an enterprise network. While testing the cluster using the ping command, the administrator monitors packet loss and found that the session output on FortiGate_B is as shown in the exhibit. What could be the cause of this output on FortiGate_B?

A : The session synchronization is encrypted.

B : session-pickup-connectionless is set to disable on FortiGate_B.

C : FortiGate_B is configured in passive mode.

D : FortiGate_A and FortiGate_B have the same standalone-group-id value.

Answer: B

Question 3

Examine these partial outputs from two routing debug commands:Why is the default route that uses port2 not in the output of the second command?

A : It has a higher distance than the default route using port1.

B : There can be only one default route present in an active routing table.

C : It is disabled in the FortiGate configuration.

D : It has a higher priority than the default route using port1.

Answer: A

Question 4

Refer to the exhibit, which contains a TCL script configuration on FortiManager.An administrator has configured the TCL script on FortiManager, but the TCL script failed to apply any changes to the managed device after being run.Why did the TCL script fail to make any changes to the managed device?

A : The TCL script must start with #include .

B : The TCL command run_cmd has not been created.

C : Changes to an interface configuration can be made only by a CLI script.

D : Incomplete commands are ignored in TCL scripts.

Answer: B

Question 5

When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

A : FortiGate uses the CN information from the Subject field in the server certificate.

B : FortiGate switches to the full SSL inspection method to decrypt the data.

C : FortiGate uses the requested URL from the user's web browser.

D : FortiGate blocks the request without any further inspection.

Answer: A

Page: 1 / 32

Total 159 Questions | Updated On: Dec 01, 2024

Add To Cart