FCP_FGT_AD-7.6 Exam Dumps - Fortinet Network Security Expert Questions and Answers

FortiGate buffers the whole file but transmits to the client at the same time.

Flow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection.

If a virus is detected, the last packet is delivered to the client.

Flow-based inspection optimizes performance compared to proxy-based inspection.

The IPS engine handles the process as a standalone.

An HA cluster cannot have both in-band and out-of-band management interfaces at the same time.

Link failover triggers a failover if the administrator sets the interface down on the primary device.

When sniffing the heartbeat interface, the administrator must see the IP address 169.254.0.2.

HA incremental synchronization includes FIB entries and IPsec SAs.

Upstream FortiGate IP must be set to 10.0.11.254.

SAML Single Sign-On must be set to Manual.

HQ-ISFW-2 must be authorized on HQ-ISFW.

Management IP must be set to 10.0.13.254.

HQ-NGFW-1 will synchronize the override disable setting with HQ-NGFW-2.

HQ-NGFW-2 will take over as the primary because it has the override enable setting and higher priority than HQ-NGFW-1.

HQ-NGFW-1 will remain the primary because HQ-NGFW-2 has lower priority.

The HA cluster will become out of sync because the override setting must match on all HA members.

The FortiGate temporary certificate denies the browser’s access to websites that use HTTP Strict Transport Security.

These websites are in an allowlist of reputable domain names maintained by FortiGuard.

The resources utilization is optimized because these websites are in the trusted domain list on FortiGate.

The legal regulation aims to prioritize user privacy and protect sensitive information for these websites.

You can turn off IKE fragmentation to fix large certificate negotiation problems.

You should use IPsec to solve issues with fragment drops and large certificate exchanges.

You can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500).

You can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports.

The Underlay zone is the zone by default.

The Underlay zone contains no member.

port2 and port3 are not assigned to a zone.

The virtual-wan-link and overlay zones can be deleted.

Enabled

On Idle

Disabled

On Demand

Actions involve only devices included in the Security Fabric.

An automation stitch can have multiple triggers.

Multiple actions can run in parallel.

Triggers can involve external connectors.

The DC agent sends login event data directly to FortiGate.

The user logs into the windows domain.

The collector agent forwards login event data to FortiGate.

FortiGate determines user identity based on the IP address in the FSSO list.