FCP_FGT_AD-7.6 무료 덤프문제 온라인 액세스

A network administrator has configured an SSL/SSH inspection profile defined for full SSL inspection and set with a private CA certificate. The firewall policy that allows the traffic uses this profile for SSL inspection and performs web filtering. When visiting any HTTPS websites, the browser reports certificate warning errors.
What is the reason for the certificate warning errors?

• A.The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.
• B.The SSL cipher compliance option is not enabled on the SSL inspection profile. This setting is required when the SSL inspection profile is defined with a private CA certificate.
• C.The browser does not recognize the certificate in use as signed by a trusted CA.
• D.With full SSL inspection it is not possible to avoid certificate warning errors at the browser level.

An administrator manages a FortiGate model that supports NTurbo.
How does NTurbo enhance performance for flow-based inspection?

• A.NTurbo creates two inspection sessions on the FortiGate device.
• B.NTurbo buffers the whole file and then sends it to the antivirus engine.
• C.NTurbo creates a special data path to redirect traffic between the IPS engine its ingress and egress interfaces.
• D.NTurbo offloads traffic to the content processor.

Refer to the exhibits, which show the firewall policy and an antivirus profile configuration.


Why is the user unable to receive a block replacement message when downloading an infected file for the first time?

• A.The intrusion prevention security profile must be enabled when using flow-based inspection mode.
• B.The option to send files to FortiSandbox for inspection is enabled.
• C.The firewall policy performs a full content inspection on the file.
• D.Flow-based inspection is used, which resets the last packet to the user.

Refer to the exhibit. Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit.
What can you conclude about the signature when adding the FTP.Login.Failed signature to the IPS Sensor profile?

• A.The signature setting uses a custom rating threshold
• B.FortiGate allows this low severity signature packet and creates a log.
• C.FortiGate stores a local copy of the packet that matches the signature.
• D.The signature setting includes a group of other signatures.

What are three key routing principles in SD-WAN? (Choose three.)

• A.By default. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.
• B.By default. SD-WAN rules are skipped if the included SD-WAN members do not have a valid route to the destination.
• C.By default. SD-WAN rules are skipped if only one route to the destination is available.
• D.Regular policy routes have precedence over SD-WAN rules.
• E.SD-WAN rules have precedence over any other type of routes.