Free Practice Fortinet FCP_FGT_AD-7.4 Exam Questions 2025

Stay ahead with 100% Free FCP - FortiGate 7.4 Administrator FCP_FGT_AD-7.4 Dumps Practice Questions

Page: 1 / 52

Total 258 Questions | Updated On: Jun 03, 2025

Add To Cart

Question 1

What inspection mode does FortiGate use if it is configured as a policy-based next-generation firewall (NGFW)?

A : Full Content inspection

B : Proxy-based inspection

C : Certificate inspection

D : Flow-based inspection

Answer: D

Question 2

Which statement about the IP authentication header (AH) used by IPsec is true?

A : AH does not provide any data integrity or encryption.

B : AH does not support perfect forward secrecy.

C : AH provides data integrity but no encryption.

D : AH provides strong data integrity but weak encryption.

Answer: C

Question 3

If the Services field is configured in a Virtual IP (VIP), which of the following statements is true when central NAT is used?

A : The Services field removes the requirement of creating multiple VIPs for different services.

B : The Services field is used when several VIPs need to be bundled into VIP groups.

C : The Services field does not allow source NAT and destination NAT to be combined in the same policy.

D : The Services field does not allow multiple sources of traffic, to use multiple services, to connect to a single computer.

Answer: A

Question 4

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements are true about the requirements of connected physical interfaces on FortiGate? (Choose two.)

A : Both interfaces must have the interface role assigned

B : Both interfaces must have directly connected routes on the routing table

C : Both interfaces must have DHCP enabled

D : Both interfaces must have IP addresses assigned

Answer: B,D

Question 5

Refer to the exhibit.

The exhibit shows proxy policies and proxy addresses, the authentication rule and authentication scheme, users, and firewall address.

An explicit web proxy is configured for subnet range 10.0.1.0/24 with three explicit web proxy policies.

The authentication rule is configured to authenticate HTTP requests for subnet range 10.0.1.0/24 with a form-based authentication scheme for the FortiGate local user database. Users will be prompted for authentication.

How will FortiGate process the traffic when the HTTP request comes from a machine with the source IP 10.0.1.10 to the destination http:// www.fortinet.com? (Choose three.)

A : If a Mozilla Firefox browser is used with User-B credentials, the HTTP request will be allowed.

B : If a Google Chrome browser is used with User-B credentials, the HTTP request will be allowed.

C : If a Mozilla Firefox browser is used with User-A credentials, the HTTP request will be allowed.

D : If a Microsoft Internet Explorer browser is used with User-B credentials, the HTTP request will be allowed.

E : If a Mozilla Firefox browser is used with User-C credentials, the HTTP request will be denied.

Answer: B,C,D

Page: 1 / 52

Total 258 Questions | Updated On: Jun 03, 2025

Add To Cart