Free Fortinet FCSS_EFW_AD-7.4 Exam Questions

Become Fortinet Certified with updated FCSS_EFW_AD-7.4 exam questions and correct answers

Page: 1 / 21

Total 102 Questions | Updated On: Mar 03, 2025

Add To Cart

Question 1

When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

A : FortiGate uses the CN information from the Subject field in the server certificate.

B : FortiGate switches to the full SSL inspection method to decrypt the data.

C : FortiGate uses the requested URL from the user's web browser.

D : FortiGate blocks the request without any further inspection.

Answer: A

Question 2

Which two statements about OCVPN are true? (Choose two.)

A : Only root vdom supports OCVPN.

B : OCVPN supports static and dynamic IPs in WAN interface.

C : OCVPN offers only Hub-Spoke VPNs.

D : FortiGate devices under different FortiCare accounts can be used to form OCVPN.

Answer: A,B

Question 3

What is the diagnose test application ipsmonitor 99 command used for?

A : To enable IPS bypass mode

B : To provide information regarding IPS sessions

C : To disable the IPS engine

D : To restart all IPS engines and monitors

Answer: D

Question 4

What is the diagnose test application ipsmonitor 99 command used for?

A : To enable IPS bypass mode

B : To provide information regarding IPS sessions

C : To disable the IPS engine

D : To restart all IPS engines and monitors

Answer: D

Question 5

Examine these partial outputs from two routing debug commands:Why is the default route that uses port2 not in the output of the second command?

A : It has a higher distance than the default route using port1.

B : There can be only one default route present in an active routing table.

C : It is disabled in the FortiGate configuration.

D : It has a higher priority than the default route using port1.

Answer: A

Page: 1 / 21

Total 102 Questions | Updated On: Mar 03, 2025

Add To Cart