FCP_FGT_AD-7.6 무료 덤프문제 온라인 액세스

You have configured the below commands on a FortiGate.

What would be the impact of this configuration on FortiGate?

• A.FortiGate will enable strict RPF on all its interfaces and port1 will be exempted from RPF checks.
• B.FortiGate will enable strict RPF on ail its interfaces and port1 will be enable for asymmetric routing.
• C.The global configuration will take precedence and FortiGate will enable strict RPF on all interfaces.
• D.Port1 will be enabled with flexible RPF, and all other interfaces will be enabled for strict RPF

A FortiGate firewall policy is configured with active authentication, however, the user cannot authenticate when accessing a website.
Which protocol must FortiGate allow even though the user cannot authenticate?

• A.DNS
• B.TACASC+
• C.Kerberos
• D.LDAP

An administrator wants to analyze and manage digital certificates to prevent browser warnings when users connect to the SSL VPN portal.
Which two statements describe how to correctly do this? (Choose two.)

• A.The administrator can import the FortiGate self-signed certificate into each user's browser as a trusted certificate.
• B.The administrator must disable HTTPS administrative access entirely to avoid certificate warnings.
• C.The administrator can use a publicly trusted certificate from a known certificate authority (CA) to stop browser warnings.
• D.The administrator can rely on the default FortiGate self-signed certificate to prevent all security warnings in the browser.

Which two statements are correct when FortiGate enters conserve mode? (Choose two.)

• A.FortiGate halts complete system operation and requires a reboot to regain available resources.
• B.FortiGate continues to transmit packets without IPS inspection when the fail-open global setting in IPS is enabled.
• C.FortiGate refuses to accept configuration changes.
• D.FortiGate continues to run critical security actions, such as quarantine.

An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is no inbound traffic.
Which DPD mode on FortiGate meets this requirement?

• A.On Idle
• B.Enabled
• C.On Demand
• D.Disabled