FCSS_EFW_AD-7.6 Free Practice Test

A company that acquired multiple branches across different countries needs to install new FortiGate devices on each of those branches. However, the IT staff lacks sufficient knowledge to implement the initial configuration on the FortiGate devices.
Which three approaches can the company take to successfully deploy advanced initial configurations on remote branches? (Choose three.)

1. A. Use metadata variables to dynamically assign values according to each FortiGate device.
2. B. Use provisioning templates and install configuration settings at the device layer.
3. C. Use the Global ADOM to deploy global object configurations to each FortiGate device.
4. D. Apply Jinja in the FortiManager scripts for large-scale and advanced deployments.
5. E. Add FortiGate devices on FortiManager as model devices, and use ZTP or LTP to connect to FortiGate devices.

Correct Answer: ABE

Refer to the exhibit, which shows the ADVPN network topology and partial BGP configuration.


Which two parameters must an administrator configure in the config neighbor range for spokes shown in the exhibit? (Choose two.)

1. A. set max-neighbor-num 2
2. B. set neighbor-group advpn
3. C. set route-reflector-client enable
4. D. set prefix 172.16.1.0 255.255.255.0

Correct Answer: BD

During the maintenance window, an administrator must sniff all the traffic going through a specific firewall policy, which is handled by NP6 interfaces. The output of the sniffer trace provides just a few packets.
Why is the output of sniffer trace limited?

1. A. The traffic corresponding to the firewall policy is encrypted.
2. B. auto-asic-off load is set to enable in the firewall policy,
3. C. inspection-mode is set to proxy in the firewall policy.
4. D. The option npudbg is not added in the diagnose sniff packet command.

Correct Answer: B

Refer to the exhibit, which shows a network diagram.

An administrator would like to modify the MED value advertised from FortiGate_1 to a BGP neighbor in the autonomous system 30.
What must the administrator configure on FortiGate_1 to implement this?

1. A. route-map-out
2. B. network-import-check
3. C. prefix-list-out
4. D. distribute-list-out

Correct Answer: A

An administrator wants to scale the IBGP sessions and optimize the routing table in an IBGP network.
Which parameter should the administrator configure?

1. A. network-import-check
2. B. ibgp-enforce-multihop
3. C. neighbor-group
4. D. route-reflector-client

Correct Answer: D