FCP_FGT_AD-7.4 試験問題を無料オンラインアクセス

When FortiGate performs SSL/SSH full inspection, you can decide how it should react when it detects an invalid certificate.
Which three actions are valid actions that FortiGate can perform when it detects an invalid certificate? (Choose three.)

• A.Block & Warning
• B.Block
• C.Allow
• D.Allow & Warning
• E.Trust & Allow

Refer to the exhibit showing a FortiGuard connection debug output.

Based on the output, which two facts does the administrator know about the FortiGuard connection? (Choose two.)

• A.One server was contacted to retrieve the contract information.
• B.FortiGate is using default FortiGuard communication settings.
• C.A local FortiManaqer is one of the servers FortiGate communicates with.
• D.There is at least one server that lost packets consecutively.

What is the primary FortiGate election process when the HA override setting is disabled?

• A.Connected monitored ports > Priority > HA uptime > FortiGate serial number
• B.Connected monitored ports > Priority > System uptime > FortiGate serial number
• C.Connected monitored ports > System uptime > Priority > FortiGate serial number
• D.Connected monitored ports > HA uptime > Priority > FortiGate serial number

What are two features of collector agent advanced mode? (Choose two.)

• A.In advanced mode, security profiles can be applied only to user groups, not individual users.
• B.Advanced mode uses the Windows convention -NetBios: Domain\Username.
• C.In advanced mode, FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate.
• D.Advanced mode supports nested or inherited groups.

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)

• A.On Remote-FortiGate, set Seconds to 43200.
• B.On HQ-FortiGate, enable Diffie-Hellman Group 2.
• C.On HQ-FortiGate, set Encryption to AES256.
• D.On Remote-FortiGate, set Remote Address to 10.0.1.0/255.255.255.0.