FCP - FortiGate 7.4

Which three methods are used by the collector agent for AD polling? (Choose three.)

• WinSecLog

• WMI

• NetAPI

• FSSO REST API

• FortiGate polling

Which two statements describe how the RPF check is used? (Choose two.)

• The RPF check is run on the first sent packet of any new session.

• The RPF check is run on the first reply packet of any new session.

• The RPF check is run on the first sent and reply packet of any new session.

• The RPF check is a mechanism that protects FortiGateand the network from IP spoofingattacks.

Refer to the exhibits, which show the firewall policy and an antivirus profile configuration. Why is the user unable to receive a block replacement message when downloading an infected file for the first time?

• The intrusion prevention security profile must be enabled when using flow-based inspection mode.

• The option to send files to FortiSandbox for inspection is enabled.

• The firewall policy performs a full content inspection on the file.

• Flow-based inspection is used, which resets the last packet to the user.

Which two features of IPsec IKEv1 authentication are supported by FortiGate? (Choose two.)

• Pre-shared key and certificate signature as authentication methods

• Extended authentication (XAuth)to request the remote peer to provide a username and password

• Extended authentication (XAuth) for faster authentication because fewer packets are exchanged

• No certificate is required on the remote peer when you set the certificate signature as the authentication method

Refer to the exhibits. Based on the information shown in the exhibit, which two configuration options can the administrator use to fix the connectivity issue for PC3? (Choose two.)

• In the firewall policy configuration, add 10. o. l. 3 as an address object in the source field.

• In the IP pool configuration, set endig to 192.2.0.12.

• Configure another firewall policy that matches only the address of PC3 as source, and then place the policy on top of the list.

• In the IP pool configuration, set cype to overload.

Which two statements are true regarding FortiGate HA configuration synchronization? (Choose two.)

• Checksums of devices are compared against each other to ensure configurations are the same.

• Incremental configuration synchronization can occur only from changes made on the primary FortiGate device.

• Incremental configuration synchronization can occur from changes made on any FortiGate device within the HA cluster

• Checksums of devices will be different from each other because some configuration items are not synced to other HA members.

Refer to the exhibit. Which two statements are true about the routing entries in this database table? (Choose two.)

• All of the entries in the routing database table are installed in the FortiGate routingtable.

• The port2 interface is marked as inactive.

• Both default routes have different administrative distances.

• The default route on porc2 is marked as the standby route.

A network administrator is configuring an IPsec VPN tunnel for a sales employee travelling abroad. Which IPsec Wizard template must the administrator apply?

• Remote Access

• Site to Site

• Dial up User

• iHub-and-Spoke

Refer to the exhibit, which shows a partial configuration from the remote authentication server. Why does the FortiGate administrator need this configuration?

• To authenticate only the Training user group.

• To set up a RADIUS server Secret

• To authenticate and match the TrainingOU on the RADIUS server.

• To authenticate Any FortiGate user groups.

Refer to the exhibit. FortiGate is configured for firewall authentication. When attempting to access an external website, the user is not presented with a login prompt. What is the most likely reason for this situation?

• The Service DNS is required in the firewall policy.

• The user is using an incorrect user name.

• The Remote-users group is not added to the Destination.

• No matching user account exists for this user.