Free FCP_FGT_AD-7.4 Practice Questions and Answers | Updated 2025

• Question 1

  An administrator must enable a DHCP server on one of the directly connected networks on FortiGate. However, the administrator is unable to complete the process on the GUI to enable the service on the interface.In this scenario, what prevents the administrator from enabling DHCP service?

  • The role of the interface prevents setting a DHCP server.
  • The DHCP server setting is available only on the CLI.
  • Another interface is configured as the only DHCP server on FortiGate.
  • The FortiGate model does not support the DHCP server.

  Show Answer Answer: A Next

• Question 2

  A network administrator wants to set up redundant IPsec VPN tunnels on FortiGate by using two IPsec VPN tunnels and static routes.All traffic must be routed through the primary tunnel when both tunnels are up. The secondary tunnel must be used only if the primary tunnel goes down. In addition, FortiGate should be able to detect a dead tunnel to speed up tunnel failover.Which two key configuration changes must the administrator make on FortiGate to meet the requirements? (Choose two.)

  • Enable Dead Peer Detection
  • Enable Auto-negotiate and Autokey Keep Alive on the phase 2 configuration of both tunnels.
  • Configure a lower distance on the static route for the primary tunnel, and a higher distance on the static route for the secondary tunnel.
  • Configure a higher distance on the static route for the primary tunnel, and a lower distance on the static route for the secondary tunnel.

  Show Answer Answer: A, ,C Next

• Question 3

  An administrator manages a FortiGate model that supports NTurbo. How does NTurbo enhance performance for flow-based inspection?

  • NTurbo ofloads traffic to the content processor.
  • NTurbo creates two inspection sessions on the FortiGate device.
  • NTurbo buffers the whole file and then sends it to the antivirus engine.
  • NTurbo creates a special data path to redirect traffic between the IPS engine its ingress and egress interfaces.

  Show Answer Answer: A Next

• Question 4

  Which inspection mode does FortiGate use for application profiles if it is configured as a profile- based next-generation firewall (NGFW)?

  • Full content inspection
  • Proxy-based inspection
  • Certificate inspection
  • Flow-based inspection

  Show Answer Answer: D Next

• Question 5

  Which two settings are required for SSL VPN to function between two FortiGate devices? (Choose two.)

  • The client FortiGate requires the SSL VPN tunnel interface type to connect SSL VPN.
  • The server FortiGate requires a CA certificate to verify the client FortiGate certificate.
  • The client FortiGate requires a client certificate signed by the CA on the server FortiGate.
  • The client FortiGate requires a manually added route to remote subnets.

  Show Answer Answer: A, ,B Next