What is the primary FortiGate election process when the HA override setting is disabled?
Answer(s): D
https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-HA-Primary-unit-selection- process-when/ta-p/249745https://docs.fortinet.com/document/fortigate/6.0.0/handbook/666653/primary-unit-selection-with- override-disabled-default
Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)
Answer(s): A,B
If fortigate is used as an SSL VPN client, it needs a ssl virtual tunnel interface to connect to the SSL VPN server. This is the client virtual interface that the vpn server will assign the temporary IP address to during the lifetime of an ssl connection. The SSL VPN server also needs a correct CA certificate to authenticate/trust client's certificate.
Refer to the exhibit.Which statement about this firewall policy list is true?
Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.Based on the exhibit, which statement is true?
Answer(s): B
The "d-wan" zone in FortiGate SD-WAN configuration is the default SD-WAN zone created when SD- WAN is enabled. This zone contains all the interfaces assigned to SD-WAN and is essential for the functionality of the SD-WAN feature. The "d-wan" zone cannot be deleted because it is required for SD-WAN operations. Option A is incorrect because the underlay zone does not contain port1. Options B and D are incorrect because they incorrectly describe the configuration of zones.
FortiOS 7.4.1 Administration Guide: SD-WAN Zone Configuration
Which two statements describe how the RPF check is used? (Choose two.)
Answer(s): A,D
The Reverse Path Forwarding (RPF) check is run on the first sent packet of any new session to ensure that the packet arrives on a legitimate interface. This check protects the network from IP spoofing attacks by verifying that a return route exists from the receiving interface back to the source IP address. If the route is invalid or not found, the packet is discarded. Options B and C are incorrect because RPF checks are performed on the first sent packet, not the reply packet.
FortiOS 7.4.1 Administration Guide: Reverse Path Forwarding (RPF) Check
Post your Comments and Discuss Fortinet FCP_FGT_AD-7.4 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the FCP_FGT_AD-7.4 content, but please register or login to continue.