FCP_FGT_AD-7.4 무료 덤프문제 온라인 액세스

Refer to the exhibit.

The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile.
An administrator must block access to download.com, which belongs to the Freeware and Software Downloads category. The administrator must also allow other websites in the same category.
What are two solutions for satisfying the requirement? (Choose two.)

• A.Configure a web override rating for download, com and select Malicious Websites as the subcategory.
• B.Configure a separate firewall policy with action Deny and an FQDN address object for *. download, com as destination address.
• C.Configure a static URL filter entry for download, com with Type and Action set to Wildcard and Block, respectively.
• D.Set the Freeware and Software Downloads category Action to Warning

Refer to the exhibits.



FGT-1 and FGT-2 are updated with HA configuration commands shown in the exhibit.
What would be the expected outcome in the HA cluster?

• A.FGT-1 will synchronize the override disable setting with FGT-2.
• B.FGT-2 will take over as the primary because it has the override enable setting and higher priority than FGT-1.
• C.FGT-1 will remain the primary because FGT-2 has lower priority.
• D.The HA cluster will become out of sync because the override setting must match on all HA members.

Refer to the exhibit.

Which two statements are true about the routing entries in this database table? (Choose two.)

• A.All of the entries in the routing database table are installed in the FortiGate routing table.
• B.The default route on port2 is marked as the standby route.
• C.The port2 interface is marked as inactive.
• D.Both default routes have different administrative distances.

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)

• A.On Remote-FortiGate, set Seconds to 43200.
• B.On HQ-FortiGate, enable Diffie-Hellman Group 2.
• C.On HQ-FortiGate, set Encryption to AES256.
• D.On Remote-FortiGate, set Remote Address to 10.0.1.0/255.255.255.0.

Refer to the exhibits, which show the system performance output and the default configuration of high memory usage thresholds in a FortiGate.


Based on the system performance output, what can be the two possible outcomes? (Choose two.)

• A.Administrators can access FortiGate onlythrough the console port.
• B.FortiGate has entered conserve mode.
• C.FortiGate will start sending all files to FortiSandbox for inspection.
• D.Administrators cannot change the configuration.