FCP_FGT_AD-7.6 試験問題を無料オンラインアクセス

Refer to the exhibit. Which two statements about the FortiGuard connection are true? (Choose two.)

• A.The weight increases as the number of failed packets rises.
• B.FortiGate identified the FortiGuard Server using DNS lookup.
• C.You can configure unreliable protocols to communicate with FortiGuard Server.
• D.FortiGate is using the default port for FortiGuard communication.

An administrator has configured a dialup IPsec VPN on FortiGate with add-route enabled.
However, the static route is not showing in the routing table.
Which two statements about this scenario are correct? (Choose two.)

• A.The administrator must ensure phase 2 is successfully established.
• B.The administrator must use a policy route instead of a static route for add-route to work properly.
• C.The administrator must define the remote network correctly in the phase 2 selectors.
• D.The administrator must enable a dynamic routing protocol on the dialup interface.

An administrator wants to form an HA cluster using the FGCP protocol.
Which two requirements must the administrator ensure both members fulfill? (Choose two.)

• A.They must have the heartbeat interfaces in the same subnet.
• B.They must have the same HA group ID.
• C.They must have the same number of configured VDOMs.
• D.They must have the same hard drive configuration.

Refer to the exhibit showing a debug flow output.

Which two conclusions can you make from the debug flow output? (Choose two.)

• A.The RPF check fails.
• B.The debug flow is for UDP traffic.
• C.The default gateway is configured on port2.
• D.The matching firewall policy denies the traffic.

An administrator wants to analyze and manage digital certificates to prevent browser warnings when users connect to the SSL VPN portal.
Which two statements describe how to correctly do this? (Choose two.)

• A.The administrator can import the FortiGate self-signed certificate into each user's browser as a trusted certificate.
• B.The administrator must disable HTTPS administrative access entirely to avoid certificate warnings.
• C.The administrator can rely on the default FortiGate self-signed certificate to prevent all security warnings in the browser.
• D.The administrator can use a publicly trusted certificate from a known certificate authority (CA) to stop browser warnings.