Online Access Free FCP_FGT_AD-7.6 Practice Test

Which two statements describe how the RPF check is used? (Choose two.)

• A.The RPF check is run on the first sent packet of any new session.
• B.The RPF check is run on the first reply packet of any new session.
• C.The RPF check is run on the first sent and reply packet of any new session.
• D.The RPF check is a mechanism that protects FortiGate and the network from IP spoofing attacks.

Which two statements describe characteristics of automation stitches? (Choose two.)

• A.Multiple actions can run in parallel.
• B.Triggers can involve external connectors.
• C.Actions involve only devices included in the Security Fabric.
• D.An automation stitch can have multiple triggers.

Which three pieces of information does FortiGate use to identify the hostname of the SSL server when SSL certificate inspection is enabled? (Choose three.)

• A.The serial number in the server certificate.
• B.The host field in the HTTP header.
• C.The server name indication (SNI) extension in the client hello message.
• D.The subject field in the server certificate.
• E.The subject alternative name (SAN) field in the server certificate.

Refer to the exhibits. The exhibits show a diagram of a FortiGate device connected to the network, and the firewall configuration.



An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2.
The policy should work such that Remote-User1 must be able to access the Webserver while preventing Remote-User2 from accessing the Webserver.
Which additional configuration can the administrator add to a deny firewall policy, beyond the default behavior, to block Remote-User2 from accessing the Webserver?

• A.Set the Destination address as Webserver in the Deny policy.
• B.Configure a One-to-One IP Pool object in a new policy.
• C.Set the Destination address as Deny_IP in the Allow_access policy.
• D.Disable match-vip in the Allow_access policy

Refer to the exhibits.



You are asked to implement an antivirus profile for files downloaded through FTP, HTTP, and HTTPS.
While testing, you are successful with HTTP and FTP protocols, but FortiGate does not block the file download over HTTPS.
What could be the cause?

• A.The action on the firewall policy is not set to deny.
• B.The feature set in the antivirus profile is not set to Flow-based.
• C.The SSL inspection mode in the firewall policy is not deep content inspection.
• D.Web filter is not enabled on the firewall policy to complement the antivirus profile.