FCP_FGT_AD-7.6 FortiGate 7.6 Administrator FCP_FGT_AD-7.6 Questions and Answers

Policies in Interface Pair View are prioritized by security levels, while By Sequence View strictly follows the administrator’s manual ordering.

By Sequence View groups policies based on rule priority, while Interface Pair View always follows the order of traffic logs.

The firewall dynamically reorders policies in Interface Pair View based on recent traffic patterns, but By Sequence View remains static.

Interface Pair View sorts policies based on matching interfaces, while By Sequence View shows the actual processing order of rules.

The collector agent uses a Windows API to query DCs for user logins.

NetAPI polling can increase bandwidth usage in large networks.

The NetSessionEnum function is used to track user logouts.

The collector agent must search Windows application event logs.

HQ-NGFW-1 will synchronize the override disable setting with HQ-NGFW-2.

HQ-NGFW-2 will take over as the primary because it has the override enable setting and higher priority than HQ-NGFW-1.

HQ-NGFW-1 will remain the primary because HQ-NGFW-2 has lower priority.

The HA cluster will become out of sync because the override setting must match on all HA members.

There is a no firewall policy configured with an IPS security profile.

FortiGate entered into IPS fail open state.

Administrator entered the command diagnose test application ipsmonitor 5.

Administrator entered the command diagnose test application ipsmonitor 99.

FortiGate continues to run critical security actions, such as quarantine.

FortiGate refuses to accept configuration changes.

FortiGate halts complete system operation and requires a reboot to regain available resources.

FortiGate continues to transmit packets without IPS inspection when the fail-open global setting in IPS is enabled.

FortiGuard category ratings

Application and Filter Overrides

Network Protocol Enforcement

Replacement Messages for UDP-based Applications

Whether the user is assigned to the correct AD group.

The FortiGate firewall policy settings for SSL decryption.

The FortiGate FSSO active users list for user’s IP address.

The windows event viewer for failed login attempts.

By default. SD-WAN rules are skipped if the included SD-WAN members do not have a valid route to the destination.

SD-WAN rules have precedence over any other type of routes.

Regular policy routes have precedence over SD-WAN rules.

By default. SD-WAN rules are skipped if only one route to the destination is available.

By default. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

The ABC.Com Type is set as Application instead of Filter.

The ABC.Com is configured under application profile, which must be configured as a web filter profile.

The ABC.Com Action is set to Allow.

The ABC.Com is hitting the category Excessive-Bandwidth.

The administrator can rely on the default FortiGate self-signed certificate to prevent all security warnings in the browser.

The administrator must disable HTTPS administrative access entirely to avoid certificate warnings.

The administrator can use a publicly trusted certificate from a known certificate authority (CA) to stop browser warnings.

The administrator can import the FortiGate self-signed certificate into each user’s browser as a trusted certificate.

FortiGate buffers the whole file but transmits to the client at the same time.

Flow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection.

If a virus is detected, the last packet is delivered to the client.

Flow-based inspection optimizes performance compared to proxy-based inspection.

The IPS engine handles the process as a standalone.