Free Fortinet FCP_FGT_AD-7.4 Exam Dumps Questions & Answers

Refer to exhibit.

An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.
Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

• A.  On the FortiGuard Category Based Filter configuration set Action to Warning for Social Networking
• B.  On the Static URL Filter configuration set Type to Simple
• C.  On the Static URL Filter configuration set Action to Monitor
• D.  On the Static URL Filter configuration set Action to Exempt

Which two statements are correct when FortiGate enters conserve mode? (Choose two.)

• A.  FortiGate continues to transmit packets without IPS inspection when the fail-open global setting in IPS is enabled
• B.  FortiGate halts complete system operation and requires a reboot to regain available resources
• C.  FortiGate continues to run critical security actions, such as quarantine.
• D.  FortiGate refuses to accept configuration changes

Refer to the exhibit.

Based on the routing database shown in the exhibit which two conclusions can you make about the routes? (Choose two.)

• A.  The port3 default route has the highest distance
• B.  The port1 and port2 default routes are active in the routing table
• C.  The port3 default route has the lowest metric
• D.  There will be eight routes active in the routing table

A network administrator has configured an SSL/SSH inspection profile defined for full SSL inspection and set with a private CA certificate. The firewall policy that allows the traffic uses this profile for SSL inspection and performs web filtering. When visiting any HTTPS websites, the browser reports certificate warning errors.
What is the reason for the certificate warning errors?

• A.  The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.
• B.  The browser does not recognize the certificate in use as signed by a trusted CA.
• C.  The SSL cipher compliance option is not enabled on the SSL inspection profile. This setting is required when the SSL inspection profile is defined with a private CA certificate.
• D.  With full SSL inspection it is not possible to avoid certificate warning errors at the browser level.

Which method allows management access to the FortiGate CLI without network connectivity?

• A.  CLI console widget
• B.  Serial console
• C.  SSH console
• D.  Telnet console