Free Access Fortinet.FCP_FGT_AD-7.4.v2025-07-07.q98 Practice Test (Page 9)

Question 36

Which statement regarding the firewall policy authentication timeout is true?

A.It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source IP.

B.It is a hard timeout. The FortiGate removes the temporary policy for a user's source IP address after this timer has expired.

C.It is an idle timeout. The FortiGate considers a user to be "idle" if it does not see any packets coming from the user's source MAC.

D.It is a hard timeout. The FortiGate removes the temporary policy for a user's source MAC address after this timer has expired.

Question 37

View the exhibit.
A user at 192.168.32.15 is trying to access the web server at 172.16.32.254.

Which two statements best describe how the FortiGate will perform reverse path forwarding (RPF) checks on this traffic? (Choose two.)

A.Strict RPF check will deny the traffic.

B.Loose RPF check will allow the traffic.

C.Strict RPF check will allow the traffic.

D.Loose RPF check will deny the traffic.

Question 38

Refer to the exhibits, which show a diagram of a FortiGate device connected to the network. VIP object configuration, and the firewall policy configuration.

The WAN (port1) interface has the IP address 10.200.1.1/24. The LAN (port3) interface has the IP address 10.0.1.254/24.
If the host 10.200.3.1 sends a TCP SYN packet on port 8080 to 10.200.1.10, what will the source address, destination address, and destination port of the packet be at the time FortiGate forwards the packet to the destination?

A.10.0.1.254, 10.200.1.10, and 8080, respectively

B.10.0.1.254, 10.0.1.10, and 80, respectively

C.10.200.3.1, 10.0.1.10, and 80, respectively

D.10.200.3.1, 10.0.1.10, and 8080, respectively

Question 39

An administrator must enable a DHCP server on one of the directly connected networks on FortiGate.
However, the administrator is unable to complete the process on the GUI to enable the service on the interface.
In this scenario, what prevents the administrator from enabling DHCP service?

A.The role of the interface prevents setting a DHCP server.

B.The DHCP server setting is available only on the CLI.

C.Another interface is configured as the only DHCP server on FortiGate.

D.The FortiGate model does not support the DHCP server.

Question 40

Which statement is correct regarding the use of application control for inspecting web applications?

A.Application control can identify child and parent applications, and perform different actions on them

B.Application control signatures are included in Fortinet Antivirus engine

C.Application control does not display a replacement message for a blocked web application

D.Application control does not require SSL Inspection to Identity web applications

Other Version: 1596Fortinet.FCP_FGT_AD-7.4.v2024-10-18.q51

Latest Upload: 202PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 299Nokia.4A0-113.v2026-05-01.q69; 255EC-COUNCIL.312-49v11.v2026-04-30.q214; 228Microsoft.MB-820.v2026-04-30.q101; 211Salesforce.MC-202.v2026-04-30.q57; 206BICSI.INSTC_V8.v2026-04-29.q53; 335NMLS.MLO.v2026-04-28.q82; 243NCARB.Project-Management.v2026-04-28.q27; 462EMC.D-AV-DY-23.v2026-04-27.q184; 1116ServiceNow.CSA.v2026-04-27.q483

Question 36

Question 37

Question 38

Question 39

Question 40

Download PDF File