Quiz
FCP 4
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (6)
1View the exhibit.
Both VDOMs are operating in NAT/route mode. The subnet 10.0.1.0/24 is connected to VDOM1. The subnet 10.0.2.0/24 is connected to VDOM2. There is an inter-VDOM link between VDOM1 and VDOM2. Also, necessary firewall policies are configured in VDOM1 and VDOM2.
Which two static routes are required in the FortiGate configuration, to route traffic between both subnets through an inter-VDOM link? (Choose two.)
- AA. A static route in VDOM1 with the destination subnet matching the subnet assigned to the inter-VDOM link
- BB. A static route in VDOM2 for the destination subnet 10.0.1.0/24
- CC. A static route in VDOM1 for the destination subnet 10.0.2.0/24
- DD. A static route in VDOM2 with the destination subnet matching the subnet assigned to the inter-VDOM link
2Review the Intrusion Prevention System (IPS) profile signature settings.
Which statement is correct in adding the FTP.Login.Failed signature to the IPS sensor profile?
- AA. Traffic matching the signature will be silently dropped and logged.
- BB. The signature setting uses a custom rating threshold.
- CC. The signature setting includes a group of other signatures.
- DD. Traffic matching the signature will be allowed and logged.
3Which statement is correct regarding the inspection of some of the services available by web applications embedded in third-party websites?
- AA. The security actions applied on the web applications will also be explicitly applied on the third-party websites.
- BB. The application signature database inspects traffic only from the original web application server.
- CC. FortiGuard maintains only one signature of each web application that is unique.
- DD. FortiGate can inspect sub-application traffic regardless where it was originated.
4A user located behind the FortiGate device is trying to go to http://www.addictinggames.com (Addicting.Games). The exhibit shows the application detains and application control profile.
Based on this configuration, which statement is true?
- AA. Addicting.Games will be blocked, based on the Filter Overrides configuration.
- BB. Addicting.Games will be allowed only if the Filter Overrides action is set to Learn.
- CC. Addicting.Games will be allowed, based on the Categories configuration.
- DD. Addicting.Games will be allowed, based on the Application Overrides configuration.
5Which two statements are correct about NGFW Policy-based mode? (Choose two.)
- AA. NGFW policy-based mode does not require the use of central source NAT policy
- BB. NGFW policy-based mode can only be applied globally and not on individual VDOMs
- CC. NGFW policy-based mode supports creating applications and web filtering categories directly in a firewall policy
- DD. NGFW policy-based mode policies support only flow inspection
6Which two statements are correct about NGFW Policy-based mode? (Choose two.)
- AA. NGFW policy-based mode does not require the use of central source NAT policy
- BB. NGFW policy-based mode can only be applied globally and not on individual VDOMs
- CC. NGFW policy-based mode supports creating applications and web filtering categories directly in a firewall policy
- DD. NGFW policy-based mode policies support only flow inspection
Information
- Description
- FCP FCP 7.4 Fortigate Administrator Quiz on FCP 4, created by Marcos Avila on 16/08/2024.
- Author
- Marcos Avila
- Language
- Español
- Views
- 26
- Tags
- Rating
- No ratings yet Rate this quiz