100% Free Fortinet FCP_FGT_AD-7.4 Practice Test Questions

Question 1

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements are true about the requirements of connected physical interfaces on FortiGate? (Choose two.)

A : Both interfaces must have the interface role assigned

B : Both interfaces must have directly connected routes on the routing table

C : Both interfaces must have DHCP enabled

D : Both interfaces must have IP addresses assigned

Answer: B,D

Question 2

Which two protocols are used to enable administrator access of a FortiGate device? (Choose two.)

A : SSH

B : HTTPS

C : FTM

D : FortiTelemetry

Answer: A,B

Question 3

Which three criteria can FortiGate use to look for a matching firewall policy to process traffic? (Choose three.)

A : Services defined in the firewall policy

B : Highest to lowest priority defined in the firewall policy

C : Destination defined as Internet Services in the firewall policy

D : Lowest to highest policy ID number

E : E. Source defined as Internet Services in the firewall policy

Answer: A,C,E

Question 4

Which statement about traffic flow in an active-active HA cluster is true?

A : The SYN packet from the client always arrives at the primary device first.

B : The secondary device responds to the primary device with a SYN/ACK, and then the primary device forwards the SYN/ACK to the client.

C : All FortiGate devices are assigned the same virtual MAC addresses for the HA heartbeat interfaces to redistribute to the sessions.

D : The ACK from the client is received on the physical MAC address of the primary device.

Answer: A

Question 5