Which inspection mode does FortiGate use for application profiles if it is configured as a profile- based next-generation firewall (NGFW)?
Answer(s): D
When FortiGate is configured in NGFW profile-based mode, it primarily uses flow-based inspection for application profiles. Flow-based inspection provides faster processing and lower latency by inspecting traffic in real-time without buffering, making it suitable for scenarios where performance is a priority.
FortiOS 7.4.1 Administration Guide: Inspection Modes
Refer to the exhibit showing a FortiGuard connection debug output.Based on the output, which two facts does the administrator know about the FortiGuard connection? (Choose two.)
Answer(s): A,D
The debug output indicates that FortiGate connected to one server (173.243.141.16) to retrieve contract information as it shows four FortiGuard requests without any packet loss, which confirms the connection to the server. Additionally, the default FortiGuard communication settings are being used, as indicated by the use of the HTTPS protocol on port 443, which is the default setting for FortiGuard connections.
FortiOS 7.4.1 Administration Guide: FortiGuard Connection Settings
Refer to the exhibit.Why did FortiGate drop the packet?
An administrator must enable a DHCP server on one of the directly connected networks on FortiGate. However, the administrator is unable to complete the process on the GUI to enable the service on the interface.In this scenario, what prevents the administrator from enabling DHCP service?
Answer(s): A
FortiGate interfaces can be configured in different roles, such as WAN or LAN. If an interface is set as a "WAN" role, you cannot configure it to act as a DHCP server through the GUI. The interface role must be set to "LAN" or "Undefined" to allow DHCP server configuration.
FortiOS 7.4.1 Administration Guide: DHCP Server Configuration
Refer to the exhibit.Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit.What do you conclude when adding the FTP.Login.Failed signature to the IPS sensor profile?
Post your Comments and Discuss Fortinet FCP_FGT_AD-7.4 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the FCP_FGT_AD-7.4 content, but please register or login to continue.