Free Fortinet FCSS_EFW_AD-7.6 Exam Dumps Questions & Answers

Which two recommendations prevent invalid paths when using zero phase 2 selectors?

• A.  Aggregate IPsec
• B.  Exact selectors
• C.  Assign tunnel IP
• D.  Routing protocols

What should be configured to provide hardware-accelerated inter-VDOM traffic?

• A.  NPU vlinks
• B.  Physical link
• C.  VLAN
• D.  VDOM link

Refer to the exhibits.
Network topology

Output from the command config system ha

A network diagram and the output from the command config system ha are shown.
The administrator has configured the cluster with the commands shown in the exhibit.
Why is the HA cluster not forming?

• A.  The administrator must reconfigure the cluster in active-active mode.
• B.  The administrator must reconfigure the monitor interface.
• C.  The administrator must reconfigure the cluster in FGSP mode.
• D.  The administrator must reconfigure the heartbeat interface.

How can you ensure FortiGate can analyze encrypted HTTPS traffic?

• A.  Enable proxy
• B.  Enable full SSL inspection
• C.  Set TLS 1.2
• D.  Enable SNI

Refer to the exhibit, which shows the HA status of an active-passive cluster.

An administrator wants FortiGate_B to handle the Core2 VDOM traffic.
Which modification must the administrator apply to achieve this?

• A.  The administrator must change the load balancing method on FortiGate_B.
• B.  The administrator must disable override on FortiGate_A.
• C.  The administrator must change the priority from 128 to 200 for FortiGate_B.
• D.  The administrator must change the priority from 100 to 160 for FortiGate_B.