Question 1

Refer to the exhibit.The NOC team connects to the FortiGate GUI with the NOC_Access admin profile. They request that their GUI sessions do not disconnect too early during inactivity. What must the administrator configure to answer this specific request from the NOC team?

Options :

A : Move NOC_Access to the top of the list to ensure all profile settings take effect.

B : Increase the offline value of the Override Idle Timeout parameter in the NOC_Access admin profile.

C : Ensure that all NOC_Access users are assigned the super_admin role to guarantee access

D : Increase the admintimeout value under config system accprofile NOC_Access.

Answer: D

Question 2

When configuring firewall policies which of the following is true regarding the policy ID?

Options :

A : It is mandatory to provide a policy ID while creating a firewall policy regardless of GUI or CLI.

B : A firewall policy ID identifies the order of policy execution in firewall policies.

C : You can create a policy in CLI with policy ID 0.

D : A policy ID cannot be edited once a policy is created.

Answer: D

Question 3

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.Based on the exhibit, which statement is true?

Options :

A : The Underlay zone is the zone by default.

B : The Underlay zone contains no member.

C : port2 and port3 are not assigned to a zone.

D : The virtual-wan-link and overlay zones can be deleted.

Answer: A

Question 4

What are three key routing principles in SD-WAN? (Choose three.)

Options :

A : By default. SD-WAN rules are skipped if the included SD-WAN members do not have a valid route to the destination.

B : SD-WAN rules have precedence over any other type of routes.

C : Regular policy routes have precedence over SD-WAN rules.

D : By default. SD-WAN rules are skipped if only one route to the destination is available.

E : By default. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

Answer: A,B,E

Question 5

Refer to the exhibit.As an administrator you have created an IPS profile, but it is not performing as expected. While testing you got the output as shown in the exhibit. What could be the possible reason of the diagnose output shown in the exhibit?

Options :

A : There is a no firewall policy configured with an IPS security profile.

B : FortiGate entered into IPS fail open state.

C : Administrator entered the command diagnose test application ipsmonitor 5.

D : Administrator entered the command diagnose test application ipsmonitor 99.

Answer: A

Smartly Prepare Exam with Free Online FCP_FGT_AD-7.6 Practice Test

Buying Options: