Smartly Prepare Exam with Free Online FCP_FGT_AD-7.4 Practice Test

We offer the latest FCP_FGT_AD-7.4 practice test designed for free and effective online FCP - FortiGate 7.4 Administrator certification preparation. It's a simulation of the real FCP_FGT_AD-7.4 exam experience, built to help you understand the structure, complexity, and topics you'll face on exam day.

Question 1

Which additional load balancing method is supported in equal cost multipath (ECMP) load balancing when SD-WAN is enabled?

Options :

A : Volume based

B : Source-destination IP based

C : Source IP based

D : Weight based

Answer: A

Question 2

Which statement about traffic flow in an active-active HA cluster is true?

Options :

A : The SYN packet from the client always arrives at the primary device first.

B : The secondary device responds to the primary device with a SYN/ACK, and then the primary device forwards the SYN/ACK to the client.

C : All FortiGate devices are assigned the same virtual MAC addresses for the HA heartbeat interfaces to redistribute to the sessions.

D : The ACK from the client is received on the physical MAC address of the primary device.

Answer: A

Question 3

Which three security features require the intrusion prevention system (IPS) engine to function? (Choose three.)

Options :

A : Web filter in flow-based inspection

B : Antivirus in flow-based inspection

C : DNS filter

D : Web application firewall

E : Application control

Answer: A,B,E

Question 4

What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

Options :

A : Full Content inspection

B : Proxy-based inspection

C : Certificate inspection

D : Flow-based inspection

Answer: D

Question 5

Which two VDOMs are the default VDOMs created when FortiGate is set up in split VDOM mode? (Choose two.)

Options :

A : FG-traffic

B : Mgmt

C : FG-Mgmt

D : Root

Answer: A,D