Fortinet FCSS - Enterprise Firewall 7.4 Administrator - FCSS_EFW

QUESTION NO: 1
An administrator is checking an enterprise network and sees a suspicious packet with the MAC address e0:23:ff:fc:00:86.
What two conclusions can the administrator draw? (Choose two.)

A. The suspicious packet corresponds to port 7 on a FortiGate device. B. The suspicious packet is related to a cluster with a group-id value lower than 255. C. The suspicious packet is related to a cluster that has VDOMs enabled. D. The network includes FortiGate devices configured with the FGSP protocol.

Correct Answer: B,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Refer to the exhibit, which shows an ADVPN network.

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.
What two options must the administrator configure in BGP? (Choose two.)

A. set ebgp-enforce-multrhop enable B. set next-hop-self enable C. set ibgp-enforce-multihop advpn D. set attribute-unchanged next-hop

Correct Answer: A,B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
An administrator is configuring application control with FortiGate running in next-generation firewall (NGFW) policy-based mode.
Which two actions must the administrator take? (Choose two.)

A. Create an application control profile and apply the profile to a firewall policy. B. Configure central source network address translation (SNAT), if NAT is required. C. Specify an SSLISSH inspection profile on a consolidated policy. D. Configure the action as quarantine, if an application requires feedback to prevent instability.

Correct Answer: B,C

QUESTION NO: 4
An administrator must minimize CPU and RAM use on a FortiGate firewall while also enabling essential security features, such as web filtering and application control for HTTPS traffic. Which SSL inspection setting helps reduce system load while also enabling security features, such as web filtering and application control for encrypted HTTPS traffic?

A. Enable SSL certificate inspection mode to perform basic checks without decrypting traffic. B. Configure SSL inspection to handle HTTPS traffic efficiently. C. Disable SSL inspection entirely to conserve resources. D. Use full SSL inspection to thoroughly inspect encrypted payloads.

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
Refer to the exhibit, which shows a revision history window in the FortiManager device layer.

The IT team is trying to identify the administrator responsible for the most recent update in the FortiGate device database.
Which conclusion can you draw about this scenario?

A. To identify the user who created the event, check it on the Configuration and Installation widget on FortiGate within the FortiManager device layer. B. The user script_manager is an API user from the Fortinet Developer Network (FDN) retrieving a configuration. C. Find the user in the FortiManager system logs and use the type=script command to find the administrator user in the user field. D. This retrieved process was automatically triggered by a Remote FortiGate Directly (via CLI) script.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
Why does the ISDB block layers 3 and 4 of the OSI model when applying content filtering?
(Choose two.)

A. The ISDB works in proxy mode, allowing the analysis of packets in layers 3 and 4 of the OSI model. B. FortiGate has a predefined list of all IPs and ports for specific applications downloaded from FortiGuard. C. The ISDB limits access by URL and domain. D. The ISDB blocks the IP addresses and ports of an application predefined by FortiGuard.

Correct Answer: B,D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
Refer to the exhibit, which shows the FortiGuard Distribution Network of a FortiGate device.
FortiGuard Distribution Network on FortiGate

An administrator is trying to find the web filter database signature on FortiGate to resolve issues with websites not being filtered correctly in a flow-mode web filter profile. Why is the web filter database version not visible on the GUI, such as with IPS definitions?

A. The web filter database is only accessible after manual syncing with a valid FDS server using diagnose test update info. B. The web filter database is stored locally on FortiGate, but it is hidden behind the GUI. It requires enabling debug mode to make it visible. C. The web filter database is not hosted on FortiGate: FortiGate queries FortiGuard or FortiManager for web filter ratings on demand. D. The web filter database is stored locally, but the administrator must run over CLI diagnose autoupdate versions.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
Refer to the exhibit, which shows the ADVPN IPsec interface representing the VPN IPsec phase
1 from Hub A to Spoke 1 and Spoke 2, and from Hub to Spoke 3 and Spoke 4.

An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.
What must the administrator configure in the phase 1 VPN IPsec configuration of the ADVPN tunnels?

A. set auto-discovery-sender enable and set network-id x B. set auto-discovery-forwarder enable and set remote-as x C. set auto-discovery-crossover enable and set enforce-multihop enable D. set auto-discovery-receiver enable and set npu-offload enable

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

Fortinet FCSS - Enterprise Firewall 7.4 Administrator - FCSS_EFW_AD-7.4 Exam Questions