FCP_FGT_AD-7.6問題集、Fortinet実際の試験問題

質問 1

A network administrator is reviewing firewall policies in both Interface Pair View and By Sequence View. The policies appear in a different order in each view.
Why is the policy order different in these two views?

A. By Sequence View groups policies based on rule priority, while Interface Pair View always follows the order of traffic logs.

B. Policies in Interface Pair View are prioritized by security levels, while By Sequence View strictly follows the administrator's manual ordering.

C. Interface Pair View sorts policies based on matching interfaces, while By Sequence View shows the actual processing order of rules.

D. The firewall dynamically reorders policies in Interface Pair View based on recent traffic patterns, but By Sequence View remains static.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 2

A network administrator is configuring an IPsec VPN tunnel for a sales employee travelling abroad.
Which IPsec Wizard template must the administrator apply?

A. Remote Access

B. Hub-and-Spoke

C. Dial up User

D. Site to Site

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 3

Which two statements about equal-cost multi-path (ECMP) configuration on FortiGate are true?
(Choose two.)

A. If SD-WAN is enabled, you control the load balancing algorithm with the parameter load-balance- mode.

B. If SD-WAN is disabled, you configure the load balancing algorithm in config system settings.

C. If SD-WAN is disabled, you can configure the parameter v4-ecmp-mode to volume-based.

D. If SD-WAN is enabled, you can configure routes with unequal distance and priority values to be part of ECMP.

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

質問 4

A FortiGate firewall policy is configured with active authentication, however, the user cannot authenticate when accessing a website.
Which protocol must FortiGate allow even though the user cannot authenticate?

A. DNS

B. LDAP

C. Kerberos

D. TACASC+

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 5

Which two statements are correct when FortiGate enters conserve mode? (Choose two.)

A. FortiGate continues to run critical security actions, such as quarantine.

B. FortiGate continues to transmit packets without IPS inspection when the fail-open global setting in IPS is enabled.

C. FortiGate halts complete system operation and requires a reboot to regain available resources.

D. FortiGate refuses to accept configuration changes.

正解: B,D

質問 6

An administrator suspects that the Collector Agent is not forwarding login events to FortiGate.
What is the most effective troubleshooting step?

A. Verify if DC agent is enabled on the FortiGate.

B. Verify if FortiGate is set to use LDAP authentication instead of FSSO.

C. Check if TCP port 8000 is open between the collector agent and FortiGate.

D. Restart the domain controller to refresh authentication services.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 7

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.

Based on the exhibit, which statement is true?

A. The Underlay zone is the zone by default.

B. The Underlay zone contains no member.

C. port2 and port3 are not assigned to a zone.

D. The virtual-wan-link and overlay zones can be deleted.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 8

What are two characteristics of HA cluster heartbeat IP addresses in a FortiGate device?
(Choose two.)

A. The heartbeat interface of the primary device in the cluster is always assigned IP address
169.254.0.1.

B. Heartbeat interfaces have virtual IP addresses that are manually assigned.

C. A change in the heartbeat IP address happens when a FortiGate device joins or leaves the cluster.

D. Heartbeat IP addresses are used to distinguish between cluster members.

正解: C,D

解説: (PassTest メンバーにのみ表示されます)

質問 9

Which three strategies are valid SD-WAN rule strategies for member selection? (Choose three.)

A. Manual with load balancing

B. Lowest Cost (SLA) without load balancing

C. Best Quality with load balancing

D. Lowest Cost (SLA) with load balancing

E. Lowest Quality (SLA) with load balancing

正解: A,B,D

解説: (PassTest メンバーにのみ表示されます)

Fortinet FCP - FortiGate 7.6 Administrator - FCP_FGT_AD-7.6 模擬練習