QUESTION: 33

An administrator configured a FortiGate to act as a collector for agentless polling mode.
What must the administrator add to the FortiGate device to retrieve AD user group information?

LDAP server
RADIUS server
DHCP server
Windows server

Answer(s): A

Explanation:

To retrieve AD user group information in agentless polling mode, the administrator must add an LDAP server to the FortiGate device.

Reveal Solution Next Question

QUESTION: 34

An administrator manages a FortiGate model that supports NTurbo. How does NTurbo enhance performance for flow-based inspection?

NTurbo offloads traffic to the content processor.
NTurbo creates two inspection sessions on the FortiGate device.
NTurbo buffers the whole file and then sends it to the antivirus engine.
NTurbo creates a special data path to redirect traffic between the IPS engine its ingress and egress interfaces.

Answer(s): A

Explanation:

NTurbo enhances performance for flow-based inspection by offloading traffic to the content processor.

Reveal Solution Next Question

Refer to the exhibit.

FortiGate has two separate firewall policies for Sales and Engineering to access the same web server with the same security profiles.

Which action must the administrator perform to consolidate the two policies into one?

Enable Multiple Interface Policies to select port1 and port2 in the same firewall policy
Create an Interface Group that includes port1 and port2 to create a single firewall policy
Select port1 and port2 subnets in a single firewall policy.
Replace port1 and port2 with the any interface in a single firewall policy.

Answer(s): B

Explanation:

To consolidate the two separate firewall policies for Sales and Engineering departments accessing the same web server, you can create an Interface Group that includes both port1 (Sales) and port2 (Engineering). Once the Interface Group is created, you can use this group as a single incoming interface in a single firewall policy. This approach reduces the number of policies, making management more efficient.

Reference:

FortiOS 7.4.1 Administration Guide: Firewall Policy Configuration

Reveal Solution Next Question

QUESTION: 36

Refer to the exhibit, which shows a partial configuration from the remote authentication server.

Why does the FortiGate administrator need this configuration?

To authenticate only the Training user group.
To set up a RADIUS server Secret
To authenticate and match the Training OU on the RADIUS server.
To authenticate Any FortiGate user groups.

Answer(s): C

Explanation:

The configuration shown in the exhibit indicates that the FortiGate is using a Fortinet-specific RADIUS attribute (Fortinet-Group-Name) with the value "Training." This setup allows the FortiGate to authenticate users against the RADIUS server and match them to the "Training" Organizational Unit (OU). By doing so, only users within this specific group or OU can be authenticated and allowed access through the FortiGate.

Reference:

FortiOS 7.4.1 Administration Guide: RADIUS Server Configuration

Reveal Solution Next Question

Free FCP_FGT_AD-7.4 Exam Braindumps

QUESTION: 33

Explanation:

QUESTION: 34

Explanation:

QUESTION: 35

Explanation:

Reference:

QUESTION: 36

Explanation:

Reference:

FCP_FGT_AD-7.4 Discussions & Posts