Question 1

Refer to the exhibit.

As an administrator you have created an IPS profile, but it is not performing as expected. While testing you got the output as shown in the exhibit. What could be the possible reason of the diagnose output shown in the exhibit?

Options :

A : There is a no firewall policy configured with an IPS security profile.

B : FortiGate entered into IPS fail open state.

C : Administrator entered the command diagnose test application ipsmonitor 5.

D : Administrator entered the command diagnose test application ipsmonitor 99.

Answer: A

Question 2

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements about the requirements of connected physical interfaces on FortiGate are true? (Choose two.)

Options :

A : Both interfaces must have the interface role assigned.

B : Both interfaces must have directly connected routes on the routing table.

C : Both interfaces must have DHCP enabled and interfaces set to LAN and DMZ roles assigned.

D : Both interfaces must have IP addresses assigned.

Answer: B,D

Question 3

Refer to the exhibits.

An administrator has observed the performance status outputs on an HA cluster for 55 seconds. Which FortiGate is the primary?

Options :

A : HQ-NGFW-2 with the parameter memory-failover-threshold setting

B : HQ-NGFW-2 with the parameter priority setting

C : HQ-NGFW-1 with the parameter memory-failover-flip-timeout setting

D : HQ-NGFW-1 with the parameter override setting

Answer: D

Question 4

Refer to the exhibits.

Based on the current HA status, an administrator updates the override and priority parameters on HQ-NGFW-1 and HQ-NGFW-2 as shown in the exhibit. What would be the expected outcome in the HA cluster?

Options :

A : HQ-NGFW-1 will synchronize the override disable setting with HQ-NGFW-2.

B : HQ-NGFW-2 will take over as the primary because it has the override enable setting and higher priority than HQ-NGFW-1.

C : HQ-NGFW-1 will remain the primary because HQ-NGFW-2 has lower priority.

D : The HA cluster will become out of sync because the override setting must match on all HA members.

Answer: B

Question 5

Which three statements about SD-WAN performance SLAs are true? (Choose three.)

Options :

A : They rely on session loss and jitter.

B : They can be measured actively or passively

C : They are applied in a SD-WAN rule lowest cost strategy

D : They monitor the state of the FortiGate device.

E : All the SLAtargets can be configured.

Answer: A,B,E

Confidently Practice Online with Free FCP_FGT_AD-7.6 Exam Cram

Buying Options: