Refer to the exhibit.Why is the Antivirus scan switch grayed out when you are creating a new antivirus profile for FTP?
Answer(s): A
The Antivirus scan switch is grayed out because none of the inspected protocols (HTTP, SMTP, POP3, IMAP, FTP, CIFS) have been enabled in the new antivirus profile. Until at least one protocol is turned on, FortiGate does not allow activation of the antivirus scan.
An administrator has configured a dialup IPsec VPN on FortiGate with add-route enabled. However, the static route is not showing in the routing table.Which two statements about this scenario are correct? (Choose two.)
Answer(s): C,D
The administrator must ensure phase 2 is successfully established The static route for the dialup VPN is only added after Phase 2 negotiation completes successfully.The administrator must define the remote network correctly in the phase 2 selectors The add-route feature installs a route based on the Phase 2 selectors; if they are incorrect, no route will appear in the routing table.
An administrator configured a FortiGate device to act as a collector for agentless polling mode.What must the administrator add to the FortiGate device to retrieve AD user group information?
Answer(s): B
In agentless polling mode, FortiGate directly queries Active Directory to obtain user and group information. To do this, the administrator must configure an LDAP server on the FortiGate, which allows it to retrieve user group membership details from AD.
What are two features of FortiGate FSSO agentless polling mode? (Choose two.)
Answer(s): B,C
A network administrator has enabled full SSL inspection and web filtering on FortiGate. When visiting any HTTPS websites, the browser reports certificate warning errors. When visiting HTTP websites, the browser does not report errors.What is the reason for the certificate warning errors?
When full SSL inspection is enabled, FortiGate decrypts and re-signs HTTPS traffic using its own SSL inspection certificate. If the FortiGate CA certificate is not imported and trusted by the client's browser or OS, the browser sees it as untrusted and displays certificate warning errors. HTTP traffic is unaffected since it does not use certificates.
Post your Comments and Discuss Fortinet FCP_FGT_AD-7.6 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the FCP_FGT_AD-7.6 content, but please register or login to continue.