Free Fortinet FCP_FGT_AD-7.6 Exam Dumps Questions & Answers

Refer to the exhibits.



An administrator creates a new address object on the root FortiGate (Local-FortiGate) in the security fabric. After synchronization, this object is not available on the downstream FortiGate (ISFW).
What must the administrator do to synchronize the address object?

• A.  Change the csfsetting on ISFW (downstream) to set configuration-sync local.
• B.  Change the csfsetting on ISFW (downstream) to set authorization-request-type certificate.
• C.  Change the csfsetting on Local-FortiGate (root) to set fabric object-unification default.
• D.  Change the csfsetting on both devices to set downstream-access enable.

A FortiGate administrator is required to reduce the attack surface on the SSL VPN portal.
Which SSL timer can you use to mitigate a denial of service (DoS) attack?

• A.  SSL VPN login-timeout
• B.  SSL VPN dtls-hello-timeout
• C.  SSL VPN http-request-header-timeout
• D.  SSL VPN idle-timeout

An administrator has configured a dialup IPsec VPN on FortiGate with add-route enabled.
However, the static route is not showing in the routing table.
Which two statements about this scenario are correct? (Choose two.)

• A.  The administrator must enable a dynamic routing protocol on the dialup interface.
• B.  The administrator must define the remote network correctly in the phase 2 selectors.
• C.  The administrator must use a policy route instead of a static route for add-route to work properly.
• D.  The administrator must ensure phase 2 is successfully established.

An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

• A.  A session for denied traffic is created.
• B.  Denied users are blocked for 30 minutes.
• C.  Session helpers are disabled for denied traffic.
• D.  The number of logs generated by denied traffic is reduced.

An administrator manages a FortiGate model that supports NTurbo.
How does NTurbo enhance performance for flow-based inspection?

• A.  NTurbo offloads traffic to the content processor.
• B.  NTurbo creates a special data path to redirect traffic between the IPS engine its ingress and egress interfaces.
• C.  NTurbo buffers the whole file and then sends it to the antivirus engine.
• D.  NTurbo creates two inspection sessions on the FortiGate device.