Free Fortinet FCSS_EFW_AD-7.4 Exam Questions

Become Fortinet Certified with updated FCSS_EFW_AD-7.4 exam questions and correct answers

Page: 1 / 21

Total 102 Questions | Updated On: Jan 27, 2025

Add To Cart

Question 1

When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filter web requests when the client browser does not provide the server name indication (SNI) extension?

A : FortiGate uses the CN information from the Subject field in the server certificate.

B : FortiGate switches to the full SSL inspection method to decrypt the data.

C : FortiGate uses the requested URL from the user's web browser.

D : FortiGate blocks the request without any further inspection.

Answer: A

Question 2

One firewall policy in an enterprise firewall is essentially used for IPS.Which configuration must the administrator check in this firewall policy to validate optimum performance for IPS?

A : set cp-accel-mode enable

B : set np-acceleration enable

C : set inspection-mode proxy

D : set offload enable

Answer: B

Question 3

What is the diagnose test application ipsmonitor 99 command used for?

A : To enable IPS bypass mode

B : To provide information regarding IPS sessions

C : To disable the IPS engine

D : To restart all IPS engines and monitors

Answer: D

Question 4

Which two statements about OCVPN are true? (Choose two.)

A : Only root vdom supports OCVPN.

B : OCVPN supports static and dynamic IPs in WAN interface.

C : OCVPN offers only Hub-Spoke VPNs.

D : FortiGate devices under different FortiCare accounts can be used to form OCVPN.

Answer: A,B

Question 5