FCP_FGT_AD-7.6 Free Practice Test

A new administrator is configuring FSSO authentication on FortiGate using DC Agent Mode. Which step is NOT part of the expected process?

1. A. The DC agent sends login event data directly to FortiGate.
2. B. The user logs into the windows domain.
3. C. The collector agent forwards login event data to FortiGate.
4. D. FortiGate determines user identity based on the IP address in the FSSO list.

Correct Answer: C
In DC Agent Mode, the DC agent sends login event data directly to FortiGate without involving a collector agent.

A FortiGate firewall policy is configured with active authentication, however, the user cannot authenticate when accessing a website.
Which protocol must FortiGate allow even though the user cannot authenticate?

1. A. LDAP
2. B. TACASC+
3. C. Kerberos
4. D. DNS

Correct Answer: D
DNS traffic must be allowed so the user can resolve domain names and reach the authentication server or web resources, even if authentication initially fails.

What are three key routing principles in SD-WAN? (Choose three.)

1. A. By defaul
2. B. SD-WAN rules are skipped if the included SD-WAN members do not have a valid route to the destination.
3. C. SD-WAN rules have precedence over any other type of routes.
4. D. Regular policy routes have precedence over SD-WAN rules.
5. E. By defaul
6. F. SD-WAN rules are skipped if only one route to the destination is available.
7. G. By defaul
8. H. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

Correct Answer: ABE
SD-WAN rules are skipped if none of the SD-WAN members have a valid route to the destination. SD-WAN rules take precedence over other route types.
SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member by default.

An administrator wants to analyze and manage digital certificates to prevent browser warnings when users connect to the SSL VPN portal.
Which two statements describe how to correctly do this? (Choose two.)

1. A. The administrator can rely on the default FortiGate self-signed certificate to prevent all security warnings in the browser.
2. B. The administrator must disable HTTPS administrative access entirely to avoid certificate warnings.
3. C. The administrator can use a publicly trusted certificate from a known certificate authority (CA) to stop browser warnings.
4. D. The administrator can import the FortiGate self-signed certificate into each user??s browser as a trusted certificate.

Correct Answer: CD
Using a publicly trusted certificate from a known CA prevents browser warnings without additional user action.
Importing the FortiGate self-signed certificate into users?? browsers as trusted eliminates warnings caused by untrusted certificates.

Which two statements describe characteristics of automation stitches? (Choose two.)

1. A. Actions involve only devices included in the Security Fabric.
2. B. An automation stitch can have multiple triggers.
3. C. Multiple actions can run in parallel.
4. D. Triggers can involve external connectors.

Correct Answer: CD
Automation stitches can execute multiple actions concurrently (in parallel).
Triggers for automation stitches can come from external connectors beyond just Fortinet devices.