Which three strategies are valid SD-WAN rule strategies for member selection? (Choose three.)
Answer(s): A,B,D
What are two characteristics of HA cluster heartbeat IP addresses in a FortiGate device? (Choose two.)
Answer(s): B,D
Heartbeat IP addresses are used to distinguish between cluster members Each FortiGate in the HA cluster uses unique heartbeat IPs so members can identify one another.A change in the heartbeat IP address happens when a FortiGate device joins or leaves the cluster Heartbeat IPs are dynamically reassigned when the cluster membership changes to maintain proper communication.
Refer to the exhibit, which contains a RADIUS server configuration.An administrator added a configuration for a new RADIUS server. While configuring, the administrator enabled Include in every user group.What is the impact of enabling Include in every user group in a RADIUS configuration?
Answer(s): A
Enabling Include in every user group in the RADIUS configuration means the RADIUS server is automatically added to all FortiGate user groups. As a result, any user who can authenticate successfully against that RADIUS server becomes a member of every FortiGate user group, without needing to be manually assigned.This can inadvertently grant excessive access if not carefully controlled.
Refer to the exhibits.An administrator creates a new address object on the root FortiGate (HQ-NGFW-1) in the Security Fabric. After synchronization, this object is not available on the downstream FortiGate (HQ-ISFW).What must the administrator do to synchronize the address object?
Answer(s): C
On HQ-NGFW-1 (the root FortiGate), the setting set fabric-object-unification local prevents address objects created on the root from synchronizing downstream. To propagate objects across the Security Fabric, this must be set to default. Changing the root's csf configuration to set fabric-object-unification default ensures that new address objects are synchronized to HQ-ISFW and other downstream devices.
Refer to the exhibit showing a debug flow output.Which two conclusions can you make from the debug flow output? (Choose two.)
Answer(s): A,D
The default gateway is configured on port2 The debug output shows find a route: flag=00000000 gw-0.0.0.0 via port2, which indicates that the default route (0.0.0.0/0) points out port2.The matching firewall policy denies the traffic The log line Denied by forward policy check (policy 2) confirms that policy 2 matched and explicitly dropped the traffic.
Post your Comments and Discuss Fortinet FCP_FGT_AD-7.6 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the FCP_FGT_AD-7.6 content, but please register or login to continue.