FCP_FGT_AD-7.4 試験問題を無料オンラインアクセス

A FortiGate administrator is required to reduce the attack surface on the SSL VPN portal.
Which SSL timer can you use to mitigate a denial of service (DoS) attack?

• A.SSL VPN login-timeout
• B.SSL VPN idle-timeout
• C.SSL VPN dcls-hello-timeout
• D.SSL VPN http-request-header-timeout

Refer to the exhibit.

FortiGate is configured for firewall authentication. When attempting to access an external website, the user is not presented with a login prompt.
What is the most likely reason for this situation?

• A.The user is using an incorrect user name.
• B.The Remote-users group is not added to the Destination.
• C.No matching user account exists for this user.
• D.The Service DNS is required in the firewall policy.

Refer to the exhibits.


The SSL VPN connection fails when a user attempts to connect to it.
What should the user do to successfully connect to the SSL VPN?

• A.Change the SSL VPN portal to the tunnel.
• B.Change the SSL VPN port on the client.
• C.Change the idle timeout.
• D.Change the server IP address.

Refer to exhibit.

An administrator configured the web filtering profile shown in the exhibit to block access to all social networking sites except Twitter. However, when users try to access twitter.com, they are redirected to a FortiGuard web filtering block page.
Based on the exhibit, which configuration change can the administrator make to allow Twitter while blocking all other social networking sites?

• A.On the Static URL Filter configuration set Action to Exempt
• B.On the Static URL Filter configuration set Type to Simple
• C.On the FortiGuard Category Based Filter configuration set Action to Warning for Social Networking
• D.On the Static URL Filter configuration set Action to Monitor

Which method allows management access to the FortiGate CLI without network connectivity?

• A.Serial console
• B.SSH console
• C.Telnet console
• D.CLI console widget