Online Access Free FCSS_EFW_AD-7.6 Practice Test

A company that acquired multiple branches across different countries needs to install new FortiGate devices on each of those branches. However, the IT staff lacks sufficient knowledge to implement the initial configuration on the FortiGate devices.
Which three approaches can the company take to successfully deploy advanced initial configurations on remote branches? (Choose three.)

• A.Add FortiGate devices on FortiManager as model devices, and use ZTP or LTP to connect to FortiGate devices.
• B.Use metadata variables to dynamically assign values according to each FortiGate device.
• C.Use the Global ADOM to deploy global object configurations to each FortiGate device.
• D.Use provisioning templates and install configuration settings at the device layer.
• E.Apply Jinja in the FortiManager scripts for large-scale and advanced deployments.

Refer to the exhibit, which shows a command output.

FortiGate_A and FortiGate_B are members of an FGSP cluster in an enterprise network.
While testing the cluster using the ping command, the administrator monitors packet loss and found that the session output on FortiGate_B is as shown in the exhibit.
What could be the cause of this output on FortiGate_B?

• A.FortiGate_B is configured in passive mode.
• B.FortiGate_A and FortiGate_B have the same standalone-group-id value.
• C.session-pickup-connectionless is set to disable on FortiGate_B.
• D.The session synchronization is encrypted.

How will configuring set tcp-mss-sender and set tcp-mss-receiver in a firewall policy affect the size and handling of TCP packets in the network?

• A.The maximum segment size permitted in the firewall policy determines whether TCP packets are allowed or denied.
• B.Applying commands in a firewall policy determines the largest payload a device can handle in a single TCP segment.
• C.The administrator must consider the payload size of the packet and the size of the IP header to configure a correct value in the firewall policy.
• D.The TCP packet modifies the packet size only if the size of the packet is less than the one the administrator configured in the firewall policy.

An administrator is extensively using VXLAN on FortiGate.
Which specialized acceleration hardware does FortiGate need to improve its performance?

• A.NP7
• B.SP5
• C.NTurbo
• D.##9

A company's guest internet policy, operating in proxy mode, blocks access to Artificial Intelligence Technology sites using FortiGuard. However, a guest user accessed a page in this category using port 8443.
Which configuration changes are required for FortiGate to analyze HTTPS traffic on nonstandard ports like
8443 when full SSL inspection is active in the guest policy?

• A.Administrators can block traffic on nonstandard ports by enabling the SNI check in the SSL/SSH Inspection Profile.
• B.To analyze nonstandard ports in web filter profiles, use TLSv1.3 in the SSL/SSH Inspection Profile.
• C.Add a URL wildcard domain to the website CA certificate and use it in the SSL/SSH Inspection Profile.
• D.In the Protocol Port Mapping section of the SSL/SSH Inspection Profile, enter 443, 8443 to analyze both standard (443) and non-standard (8443) HTTPS ports.