Official Bank
0/89
Page
1/4
FCP – FortiGate 7.4 Administrator (FCP_FGT_AD-7.4) - Fortinet Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
89
Total Questions
1
Question
What is the primary FortiGate election process when the HA override setting is disabled?
Options
A
Connected monitored ports > HA uptime > Priority > FortiGate serial number
B
Connected monitored ports > Priority > HA uptime > FortiGate serial number
C
Connected monitored ports > Priority > System uptime > FortiGate serial number
D
Connected monitored ports > System uptime > Priority > FortiGate serial number
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
A network administrator has configured an SSL/SSH inspection profile defined for full SSL inspection and set with a private CA certificate. The firewall policy that allows the traffic uses this profile for SSL inspection and performs web filtering. When visiting any HTTPS websites, the browser reports certificate warning errors.
What is the reason for the certificate warning errors?
What is the reason for the certificate warning errors?
Options
A
The browser does not recognize the certificate in use as signed by a trusted CA.
B
With full SSL inspection it is not possible to avoid certificate warning errors at the browser level.
C
The SSL cipher compliance option is not enabled on the SSL inspection profile. This setting is required when the SSL inspection profile is defined with a private CA certificate.
D
The certificate used by FortiGate for SSL inspection does not contain the required certificate extensions.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
Refer to the exhibits, which show the firewall policy and an antivirus profile configuration. Name default
Edit Antivirus Profile Comments Scan files and block viruses Al: 29/255 AntiVirus scan 0 © Block Monitor Feature set Flow-based Proxy based Inspected Protocols HTTP C SMTP C POP3 C IMAP C FTP C CIFS O APT Protection Options Treat Windows executables in email attachments as viruses Send files to FortiSandbax for inspection O Send files to FortiNDR for Inspection O Include mobile malware protection Quarantine O Virus Outbreak Prevention O Use FortiGuard outbreak prevention database Use external maiware block list Use EMS threat feed O Why is the user unable to receive a block replacement message when downloading an infected file
for the first time?
Edit Antivirus Profile Comments Scan files and block viruses Al: 29/255 AntiVirus scan 0 © Block Monitor Feature set Flow-based Proxy based Inspected Protocols HTTP C SMTP C POP3 C IMAP C FTP C CIFS O APT Protection Options Treat Windows executables in email attachments as viruses Send files to FortiSandbax for inspection O Send files to FortiNDR for Inspection O Include mobile malware protection Quarantine O Virus Outbreak Prevention O Use FortiGuard outbreak prevention database Use external maiware block list Use EMS threat feed O Why is the user unable to receive a block replacement message when downloading an infected file
for the first time?
Options
A
The firewall policy performs a full content inspection on the file.
B
Flow-based inspection is used, which resets the last packet to the user.
C
The intrusion prevention security profile must be enabled when using flow-based inspection mode.
D
The option to send files to FortiSandbox for inspection is enabled.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
Refer to the exhibits, which show the firewall policy and the security profile for Facebook.
Firewall policy Name e Facebook SSL Inspection Incoming Interface • port3 Outgoing Interface • port1 Source # all Destination # all Schedule To always
Service @ ALL
Action V ACCEPT © DENY Firewall/Network Options 0 Central NAT is enabled so NAT settings from matching Central SNAT policies will be applied. Protocol Options PROT default Security Profiles AntiVirus Web Filter DNS Filter Application Control APP
• Facebook Access
IPS File Filter SSL Inspection SSL certificate-inspection + + + Comments
Security profile Name Facebook Access /0/255 Categories → Mixed - All Categories ®- Business (179, C6)
•- Cloud/IT (31)
®• Email (87,C12)
*• Collaboration (293. 6)
• • Game (124)
•• General Interest (241, C.9)
Mobile (3)
• • Network Service (332)
0 - P2P (85) © - Proxy (106) © - Social Media (150, O 31)
*• Remote Access (91)
• • Update (48)
• Storage/Backup (296, C16)
• - VolP (31)
- Video/Audio (206, C.13)
© - Unknown Applications ®- Web Client (18)
• Network Protocol Enforcement
Application and Filter Overrides + Create New / Edit @ Delete Type Action Priority Details Application Allow 1 If Facebook
IF Facebook_Like.Button
If Facebook Video.Play
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts. Which part of the configuration must you change to resolve the issue?
Firewall policy Name e Facebook SSL Inspection Incoming Interface • port3 Outgoing Interface • port1 Source # all Destination # all Schedule To always
Service @ ALL
Action V ACCEPT © DENY Firewall/Network Options 0 Central NAT is enabled so NAT settings from matching Central SNAT policies will be applied. Protocol Options PROT default Security Profiles AntiVirus Web Filter DNS Filter Application Control APP
• Facebook Access
IPS File Filter SSL Inspection SSL certificate-inspection + + + Comments
Security profile Name Facebook Access /0/255 Categories → Mixed - All Categories ®- Business (179, C6)
•- Cloud/IT (31)
®• Email (87,C12)
*• Collaboration (293. 6)
• • Game (124)
•• General Interest (241, C.9)
Mobile (3)
• • Network Service (332)
0 - P2P (85) © - Proxy (106) © - Social Media (150, O 31)
*• Remote Access (91)
• • Update (48)
• Storage/Backup (296, C16)
• - VolP (31)
- Video/Audio (206, C.13)
© - Unknown Applications ®- Web Client (18)
• Network Protocol Enforcement
Application and Filter Overrides + Create New / Edit @ Delete Type Action Priority Details Application Allow 1 If Facebook
IF Facebook_Like.Button
If Facebook Video.Play
Users are given access to the Facebook web application. They can play video content hosted on Facebook but they are unable to leave reactions on videos or other types of posts. Which part of the configuration must you change to resolve the issue?
Options
A
Disable HTTP redirect to HTTPS on the web browser
B
Get the additional application signatures required to add to the security policy
C
Make the SSL inspection a deep content inspection
D
Add Facebook to the URL category in the security policy
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
Which three statements explain a flow-based antivirus profile? (Choose three.)
Select 3
Options
A
FortiGate buffers the whole file but transmits to the client at the same time.
B
If a virus is detected, the last packet is delivered to the client.
C
The IPS engine handles the process as a standalone.
D
Flow-based inspection uses a hybrid of the scanning modes available in proxy-based inspection
E
Flow-based inspection optimizes performance compared to proxy-based inspection
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.