FCP_FGT_AD-7.6 Free Practice Test

Refer to the exhibits.

An administrator has observed the performance status outputs on an HA cluster for 55 seconds. Which FortiGate is the primary?

1. A. HQ-NGFW-2 with the parameter memory-failover-threshold setting
2. B. HQ-NGFW-2 with the parameter priority setting
3. C. HQ-NGFW-1 with the parameter memory-failover-flip-timeout setting
4. D. HQ-NGFW-1 with the parameter override setting

Correct Answer: D
The HA configuration shows that override is disabled (set override disable), but despite this, HQ-NGFW-1 has the higher priority (200) and is acting as the primary, as indicated by its higher resource usage and uptime.
Override allows the device with higher priority to take over as primary, so HQ-NGFW-1 is the primary device.

Which three statements about SD-WAN performance SLAs are true? (Choose three.)

1. A. They rely on session loss and jitter.
2. B. They can be measured actively or passively.
3. C. They are applied in a SD-WAN rule lowest cost strategy.
4. D. They monitor the state of the FortiGate device.
5. E. All the SLAtargets can be configured.

Correct Answer: ABE
SD-WAN SLAs monitor metrics like packet loss and jitter to evaluate link performance. SLA measurements can be performed using active probing or passive monitoring. Administrators can configure all SLA target parameters to define performance criteria.

Refer to the exhibit.

A network administrator is troubleshooting an IPsec tunnel between two FortiGate devices. The administrator has determined that phase 1 status is up, but phase 2 fails to come up.
Based on the phase 2 configuration shown in the exhibit, which two configuration changes will bring phase 2 up? (Choose two.)

1. A. On BR1-FGT, set Seconds to 43200.
2. B. On HQ-NGFW, enable Diffie-Hellman Group 2.
3. C. On BR1-FGT, set Remote Address to 10.0.11.0/255.255.255.0
4. D. On HQ-NGF
5. E. set Encryption to AES256

Correct Answer: AC
The key lifetime (Seconds) must match on both sides; BR1-FGT is set to 14400, so setting it to 43200 matches HQ-NGFW.
The remote address on BR1-FGT should match the HQ-NGFW??s local subnet (10.0.11.0/24), but it is currently set incorrectly as 172.20.1.0/24. Changing it to 10.0.11.0/255.255.255.0 will align the Phase 2 selectors.