[2026] Fortinet FCSS - Enterprise Firewall 7.4 Administrator

문제1

Refer to the exhibit, which shows the VDOM section of a FortiGate device.

An administrator discovers that webfilter stopped working in Core1 and Core2 after a maintenance window.
Which two reasons could explain why webfilter stopped working? (Choose two.)

A. The Core1 and Core2 VDOMs must also be enabled as Management VDOMs to receive FortiGuard updates

B. The root VDOM does not have a VDOM link to connect with the Corel and Core2 VDOMs.

C. The root VDOM does not have access to FortiManager in a closed network.

D. The root VDOM does not have access to any valid public FDN.

정답: B,D

설명: (Fast2test 회원만 볼 수 있음)

문제2

While configuring the BGP protocol, an administrator applies the set network-import-check disable command under config network.
What will FortiGate do as a result of this command?

A. FortiGate will not advertise the prefixes, if it is not in the routing table.

B. FortiGate will advertise only the corresponding prefixes in the BGP network table to its BGP neighbor, even if it is not in the routing table.

C. FortiGate will advertise all the prefixes in the BGP network table to its BGP neighbor, even if it is not in the routing table.

D. FortiGate will not advertise any imported routes received from one BGP neighbor to another.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제3

An administrator is extensively using VXLAN on FortiGate. Which specialized acceleration hardware does FortiGate need to improve its performance?

A. 9

B. NP7

C. NTurbo

D. SP5

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제4

Refer to the exhibit, which contains a partial command output.

The administrator has configured BGP on FortiGate. The status of this new BGP configuration is shown in the exhibit.
What configuration must the administrator consider next?

A. Contact the remote peer administrator to enable BGP

B. Configure the local AS to 65300.

C. Enable ebgp-enforce-multihop.

D. Configure a static route to 100.65.4.1.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제5

An administrator must standardize the deployment of FortiGate devices across branches with consistent interface roles and policy packages using FortiManager. What is the recommended best practice for interface assignment in this scenario?

A. Create interfaces using device database scripts to use them on the same policy package of FortiGate devices.

B. Use the Install On feature in the policy package to automatically assign different interfaces based on the branch.

C. Create normalized interface types per-platform to automatically recognize device layer interfaces based on the FortiGate model and interface name.

D. Enable metadata variables to use dynamic configurations in the standard interfaces of FortiManager.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제6

An administrator applied a block-all IPS profile for client and server targets to secure the server, but the database team reported the application stopped working immediately after. How can an administrator apply IPS in a way that ensures it does not disrupt existing applications in the network?

A. Select flow mode in the IPS profile to accurately analyze application patterns.

B. Use an IPS profile with all signatures in monitor mode and verify patterns before blocking.

C. Set the IPS profile signature action to default to discard all possible false positives.

D. Limit the IPS profile to server targets only to avoid blocking connections from the server to clients.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제7

An administrator received a FortiAnalyzer alert that a 1 disk filled up in a day. Upon investigation, they found thousands of unusual DNS log requests, such as JHCMQK.website.com, with no answers. They later discovered that DNS exfiltration was occurring through both UDP and TLS. How can the administrator prevent this data theft technique?

A. Create an inline-CASB to protect against DNS exfiltration.

B. Enable DNS Filter to protect against DNS exfiltration.

C. Configure a File Filter profile to prevent DNS exfiltration.

D. Use an IPS profile and DNS exfiltration-related signatures.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제8

How would fec-ingress and fec-sgress IPsec configuration affect an IPsec tunnel?

A. When an FGSP member in FortiGate fails, FortiGate flushes the corresponding tunnels and sends out dead peer detection probes to find unavailable remote peers.

B. FortiGate will consider all IKEV2 packets as fragmentable.

C. FortiGate will add additional redundant information to reconstruct any lost or erratically received packets.

D. If fragmentation occurs, FortiGate will allow the packets at the IKE layer.

정답: C

Fortinet FCSS - Enterprise Firewall 7.4 Administrator - FCSS_EFW_AD-7.4무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트