Question 1

Refer to the exhibit.The NOC team connects to the FortiGate GUI with the NOC_Access admin profile. They request that their GUI sessions do not disconnect too early during inactivity. What must the administrator configure to answer this specific request from the NOC team?

Options :

A : Move NOC_Access to the top of the list to ensure all profile settings take effect.

B : Increase the offline value of the Override Idle Timeout parameter in the NOC_Access admin profile.

C : Ensure that all NOC_Access users are assigned the super_admin role to guarantee access

D : Increase the admintimeout value under config system accprofile NOC_Access.

Answer: D

Question 2

Refer to the exhibit.The predefined deep-inspection and custom-deep-inspection profiles exclude some web categories from SSL inspection, as shown in the exhibit. For which two reasons are these web categories exempted? (Choose two.)

Options :

A : The FortiGate temporary certificate denies the browsers access to websites that use HTTP Strict Transport Security.

B : These websites are in an allowlist of reputable domain names maintained by FortiGuard.

C : The resources utilization is optimized because these websites are in the trusted domain list on FortiGate.

D : The legal regulation aims to prioritize user privacy and protect sensitive information for these websites.

Answer: A,D

Question 3

You have configured the below commands on a FortiGate.What would be the impact of this configuration on FortiGate?

Options :

A : FortiGate will enable strict RPF on ail its interfaces and port1 will be enable for asymmetric routing.

B : FortiGate will enable strict RPF on all its interfaces and port1 will be exempted from RPF checks.

C : Port1 will be enabled with flexible RPF, and all other interfaces will be enabled for strict RPF

D : The global configuration will take precedence and FortiGate will enable strict RPF on all interfaces.

Answer: B

Question 4

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.Based on the exhibit, which statement is true?

Options :

A : The Underlay zone is the zone by default.

B : The Underlay zone contains no member.

C : port2 and port3 are not assigned to a zone.

D : The virtual-wan-link and overlay zones can be deleted.

Answer: A

Question 5

When configuring firewall policies which of the following is true regarding the policy ID?

Options :

A : It is mandatory to provide a policy ID while creating a firewall policy regardless of GUI or CLI.

B : A firewall policy ID identifies the order of policy execution in firewall policies.

C : You can create a policy in CLI with policy ID 0.

D : A policy ID cannot be edited once a policy is created.

Answer: D

Smartly Prepare Exam with Free Online FCP_FGT_AD-7.6 Practice Test

Buying Options: