최신 FCP_FGT_AD-7.4 무료덤프 - Fortinet FCP

문제1

Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

A. Extended authentication (XAuth) for faster authentication because fewer packets are exchanged

B. Extended authentication (XAuth)to request the remote peer to provide a username and password

C. No certificate is required on the remote peer when you set the certificate signature as the authentication method

D. Pre-shared key and certificate signature as authentication methods

정답: B,D

설명: (DumpTOP 회원만 볼 수 있음)

문제2

How can you disable RPF checking?

A. Disable src-check on the interface level settings

B. Disable fail-detect on the interface level settings.

C. Disable strict-src-check under system settings.

D. Unset fail-alert-interfaces on the interface level settings.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제3

Which statement is correct regarding the use of application control for inspecting web applications?

A. Application control signatures are included in Fortinet Antivirus engine

B. Application control does not require SSL Inspection to Identity web applications

C. Application control can identify child and parent applications, and perform different actions on them

D. Application control does not display a replacement message for a blocked web application

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제4

An administrator is configuring an IPsec VPN between site A and site B. The Remote Gateway setting in both sites has been configured as Static IP Address.
For site A, the local quick mode selector is 192.168.1.0/24 and the remote quick mode selector is 192.168.2.0/24.
Which subnet must the administrator configure for the local quick mode selector for site B?

A. 192.168.1.0/24

B. 192.168.2.0/24

C. 192.168.0.0/8

D. 192.168.3.0/24

정답: B

문제5

A network administrator is configuring an IPsec VPN tunnel for a sales employee travelling abroad.
Which IPsec Wizard template must the administrator apply?

A. Dial up User

B. iHub-and-Spoke

C. Remote Access

D. Site to Site

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제6

FortiGuard categories can be overridden and defined in different categories. To create a web rating override for the example.com home page the override must be configured using a specific syntax.
Which two syntaxes are correct to configure a web rating override for the home page? (Choose two.)

A. example.com

B. www.example.com/index.hrml

C. www.example.com

D. www.example.com:443

정답: A,C

설명: (DumpTOP 회원만 볼 수 있음)

문제7

Which three methods are used by the collector agent for AD polling? (Choose three.)

A. FSSO REST API

B. NetAPI

C. WMI

D. WinSecLog

E. FortiGate polling

정답: B,C,D

문제8

A FortiGate administrator is required to reduce the attack surface on the SSL VPN portal.
Which SSL timer can you use to mitigate a denial of service (DoS) attack?

A. SSL VPN dcls-hello-timeout

B. SSL VPN http-request-header-timeout

C. SSL VPN login-timeout

D. SSL VPN idle-timeout

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Which two statements are true about the FGCP protocol? (Choose two.)

A. FGCP is not used when FortiGate is in transparent mode

B. FGCP runs only over the heartbeat links

C. FGCP elects the primary FortiGate device

D. FGCP is used to discover FortiGate devices in different HA groups

정답: B,C

설명: (DumpTOP 회원만 볼 수 있음)

최신 FCP_FGT_AD-7.4 무료덤프 - Fortinet FCP - FortiGate 7.4 Administrator

우리와 연락하기

유용한 링크

최신 업데이트