Refer to the exhibits.The exhibits show a diagram of a FortiGate device connected to the network, and the firewall configuration.An administrator created a Deny policy with default settings to deny Webserver access for Remote-User2.The policy should work such that Remote-User1 must be able to access the Webserver while preventing Remote-User2 from accessing the Webserver.Which additional configuration can the administrator add to a deny firewall policy, beyond the default behavior, to block Remote-User2 from accessing the Webserver?
Answer(s): C
To block Remote-User2's access to the Webserver, the deny policy must explicitly specify the Webserver as the destination address; otherwise, it denies traffic to all destinations, which is not the desired behavior.
Refer to the exhibits.The exhibits show the system performance output and default configuration of high memory usage thresholds on a FortiGate device.Based on the system performance output, what are the two possible outcomes? (Choose two.)
Answer(s): A,D
Refer to the exhibits.Based on the current HA status, an administrator updates the override and priority parameters on HQ- NGFW-1 and HQ-NGFW-2 as shown in the exhibit.What would be the expected outcome in the HA cluster?
Answer(s): B
With override enabled on HQ-NGFW-2 and its higher priority (110 vs. 90), HQ-NGFW-2 will become the primary device, preempting HQ-NGFW-1 despite the current primary status.
Refer to the exhibits.An administrator wants to add HQ-ISFW-2 in the Security Fabric. HQ-ISFW-2 is in the same subnet as HQ- ISFW. After configuring the Security Fabric settings on HQ-ISFW-2, the status stays Pending.What can be the two possible reasons? (Choose two.)
Answer(s): A,C
The Upstream FortiGate IP should match the IP address of the Fabric Root interface, which is 10.0.11.254, not 10.0.13.254.The new device (HQ-ISFW-2) must be authorized on the Fabric Root (HQ-ISFW) before it can join the Security Fabric, otherwise the status remains pending.
Refer to the exhibit.The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile.An administrator must block access to download.com, which belongs to the Freeware and Software Downloads category. The administrator must also allow other websites in the same category.What are two solutions for satisfying the requirement? (Choose two.)
Answer(s): A,B
Post your Comments and Discuss Fortinet FCP_FGT_AD-7.6 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the FCP_FGT_AD-7.6 content, but please register or login to continue.