Pass the Fortinet Network Security Expert FCP_FGT_AD-7.6 Questions and answers with ExamsMirror

They rely on session loss and jitter.

They can be measured actively or passively.

They are applied in a SD-WAN rule lowest cost strategy.

They monitor the state of the FortiGate device.

All the SLAtargets can be configured.

The collector agent uses a Windows API to query DCs for user logins.

NetAPI polling can increase bandwidth usage in large networks.

The NetSessionEnum function is used to track user logouts.

The collector agent must search Windows application event logs.

FortiGate buffers the whole file but transmits to the client at the same time.

Flow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection.

If a virus is detected, the last packet is delivered to the client.

Flow-based inspection optimizes performance compared to proxy-based inspection.

The IPS engine handles the process as a standalone.

Policies in Interface Pair View are prioritized by security levels, while By Sequence View strictly follows the administrator’s manual ordering.

By Sequence View groups policies based on rule priority, while Interface Pair View always follows the order of traffic logs.

The firewall dynamically reorders policies in Interface Pair View based on recent traffic patterns, but By Sequence View remains static.

Interface Pair View sorts policies based on matching interfaces, while By Sequence View shows the actual processing order of rules.

You can turn off IKE fragmentation to fix large certificate negotiation problems.

You should use IPsec to solve issues with fragment drops and large certificate exchanges.

You can use SSL VPN tunnel mode to prevent problems with blocked ESP and UDP ports (500 or 4500).

You can configure a hub-and-spoke topology with SSL VPN tunnels to bypass blocked UDP ports.

It is mandatory to provide a policy ID while creating a firewall policy regardless of GUI or CLI.

A firewall policy ID identifies the order of policy execution in firewall policies.

You can create a policy in CLI with policy ID 0.

A policy ID cannot be edited once a policy is created.

HQ-NGFW-2 with the parameter memory-failover-threshold setting

HQ-NGFW-2 with the parameter priority setting

HQ-NGFW-1 with the parameter memory-failover-flip-timeout setting

HQ-NGFW-1 with the parameter override setting

Create an Aggregate interface that includes port1 and port2 to create a single firewall policy.

Select port1 and port2 subnets in a single firewall policy.

Replace port1 and port2 with the any interface in a single firewall policy.

Enable Multiple Interface Policies to select port1 and port2 in the same firewall policy.

To set up a RADIUS server Secret.

To authenticate Any FortiGate user groups.

To authenticate and match the Training OU on the RADIUS server.

To authenticate only the Training user group.

The administrator can rely on the default FortiGate self-signed certificate to prevent all security warnings in the browser.

The administrator must disable HTTPS administrative access entirely to avoid certificate warnings.

The administrator can use a publicly trusted certificate from a known certificate authority (CA) to stop browser warnings.

The administrator can import the FortiGate self-signed certificate into each user’s browser as a trusted certificate.