Online Access Free FCP_FGT_AD-7.6 Practice Test

Refer to the exhibit.

The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile.
An administrator must block access to download.com, which belongs to the Freeware and Software Downloads category. The administrator must also allow other websites in the same category.
What are two solutions for satisfying the requirement? (Choose two.)

• A.Configure a web override rating for download.com and select Malicious Websites as the subcategory.
• B.Set the Freeware and Software Downloads category Action to Warning.
• C.Configure a separate firewall policy with action Deny and an FQDN address object for*.download.com as destination address.
• D.Configure a static URL filter entry for download.com with Type and Action set to Wildcard and Block, respectively.

You have configured the FortiGate device for FSSO. A user is successful in log-in to windows, but their access to the internet is denied.
What should the administrator check first?

• A.The FortiGate FSSO active users list for user's IP address.
• B.The FortiGate firewall policy settings for SSL decryption.
• C.The windows event viewer for failed login attempts.
• D.Whether the user is assigned to the correct AD group.

An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is no inbound traffic.
Which DPD mode on FortiGate meets this requirement?

• A.Disabled
• B.On Idle
• C.On Demand
• D.Enabled

Refer to the exhibits.

An administrator has observed the performance status outputs on an HA cluster for 55 seconds.
Which FortiGate is the primary?

• A.HQ-NGFW-1 with the parameter override setting
• B.HQ-NGFW-1 with the parameter memory-failover-flip-timeout setting
• C.HQ-NGFW-2 with the parameter memory-failover-threshold setting
• D.HQ-NGFW-2 with the parameter priority setting

Refer to the exhibits.
An administrator configured the Web Filter Profile to block access to all social networking sites except Facebook. However, when users try to access Facebook.com, they are redirected to a FortiGuard web filtering block page.
Based on the exhibits, which configuration change must the administrator make to allow Facebook while blocking all other social networking sites?

• A.Set the Social Networking action as warning in the FortiGuard Category Based Filter.
• B.Change the Feature set of Web Filter Profile as Proxy-based.
• C.Change the type as Simple in the Static URL Filter section.
• D.Set the Action as Exempt for www.facebook.com
  in the Static URL Filter.