Free Practice Fortinet FCSS_EFW_AD-7.4 Exam Questions 2025

Stay ahead with 100% Free FCSS - Enterprise Firewall 7.4 Administrator FCSS_EFW_AD-7.4 Dumps Practice Questions

Page: 1 / 32

Total 159 Questions | Updated On: Apr 24, 2025

Add To Cart

Question 1

What is the diagnose test application ipsmonitor 99 command used for?

A : To enable IPS bypass mode

B : To provide information regarding IPS sessions

C : To disable the IPS engine

D : To restart all IPS engines and monitors

Answer: D

Question 2

One firewall policy in an enterprise firewall is essentially used for IPS.Which configuration must the administrator check in this firewall policy to validate optimum performance for IPS?

A : set cp-accel-mode enable

B : set np-acceleration enable

C : set inspection-mode proxy

D : set offload enable

Answer: B

Question 3

Which three tasks are part of the manual registration process for adding a FortiGate device to FortiManager for central management? (Choose three.)

A : Wait for the rating databases to download on FortiManager.

B : Import the policy package from the managed FortiGate device.

C : Add the FortiManager IP address to the FortiGate central management configuration.

D : Start the rating services on FortiManager.

E : In FortiManager, add the unregistered FortiGate device.

Answer: B,C,E

Question 4

An administrator wants to simplify a new hub-and-spoke network deployment with the BGP recommended configuration.Which two sections on FortiManager must the administrator use? (Choose two.)

A : Automation Stitch

B : Provisioning Templates

C : Meta Fields

D : Metadata Variables

Answer: B,D

Question 5

Refer to the exhibit, which shows a network diagram showing the addition of site 2 with an overlapping network segment to the existing VPN IPsec connection between the hub and site 1.Which IPsec phase 2 configuration must an administrator make on the FortiGate hub to enable equal-cost multi-path (ECMP) routing when multiple remote sites connect with overlapping subnets?

A : Set route-overlap to either use-new or use-old

B : Set net-device to ecmp

C : Set single-source to enable

D : Set route-overlap to allow

Answer: A

Page: 1 / 32

Total 159 Questions | Updated On: Apr 24, 2025

Add To Cart