FCSS_EFW_AD-7.6 Free Practice Test

Refer to the exhibits. The exhibits show a network topology, a firewall policy, and an SSL/SSH inspection profile configuration.



Why is FortiGate unable to detect HTTPS attacks on firewall policy ID 3 targeting the Linux server?

1. A. The administrator must set the policy to inspection mode to analyze the HTTPS packets as expected.
2. B. The administrator must enable HTTPS in the protocol port mapping of the deep- inspection SSL/SSH inspection profile.
3. C. The administrator must enable SSL inspection of the SSL server and upload the certificate of the Linux server website to the SSL/SSH inspection profile.
4. D. The administrator must enable cipher suites in the SSL/SSH inspection profile to decrypt the message.

Correct Answer: C

Refer to the exhibit, which contains the partial output of an OSPF command.

An administrator is checking the OSPF status of a FortiGate device and receives the output shown in the exhibit.
Which statement on this FortiGate device is correct?

1. A. The FortiGate device can inject external routing information.
2. B. The FortiGate device is in the area 0.0.0.5.
3. C. The FortiGate device does not support OSPF ECMP.
4. D. The FortiGate device is a backup designated router.

Correct Answer: A

Refer to the exhibit, which shows an ADVPN network

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.
What two options must the administrator configure in BGP? (Choose two.)

1. A. set ebgp-enforce-multrhop enable
2. B. set next-hop-self enable
3. C. set ibgp-enforce-multihop advpn
4. D. set attribute-unchanged next-hop

Correct Answer: AB

Why does the ISDB block layers 3 and 4 of the OSI model when applying content filtering? (Choose two.)

1. A. FortiGate has a predefined list of all IPs and ports for specific applications downloaded from FortiGuard.
2. B. The ISDB blocks the IP addresses and ports of an application predefined by FortiGuard.
3. C. The ISDB works in proxy mode, allowing the analysis of packets in layers 3 and 4 of the OSI model.
4. D. The ISDB limits access by URL and domain.

Correct Answer: AB

Refer to the exhibit, which shows a corporate network and a new remote office network.

An administrator must integrate the new remote office network with the corporate enterprise network.
What must the administrator do to allow routing between the two networks?

1. A. The administrator must implement BGP to inject the new remote office network into the corporate FortiGate device
2. B. The administrator must configure a static route to the subnet 192.168.l.0/24 on the corporate FortiGate device.
3. C. The administrator must configure virtual links on both FortiGate devices.
4. D. The administrator must implement OSPF over IPsec on both FortiGate devices.

Correct Answer: D