Fortinet FCP_FGT_AD-7.4 Exam Questions (Updated 2025) 100% Real Question Answers [Q49-Q65]

QUESTION 49
Which three statements explain a flow-based antivirus profile? (Choose three.)

QUESTION 50
Which three methods are used by the collector agent for AD polling? (Choose three.)

QUESTION 51
Refer to the exhibit to view the firewall policy.

Why would the firewall policy not block a well-known virus, for example eicar?

QUESTION 52
Refer to the exhibit, which contains a radius server configuration.

An administrator added a configuration for a new RADIUS server. While configuring, the administrator selected the Include in every user group option.
What will be the impact of using Include in every user group option in a RADIUS configuration?

QUESTION 53
Refer to the exhibits.



The exhibits show a diagram of a FortiGate device connected to the network, as well as the firewall policy and IP pool configuration on the FortiGate device.
Two PCs, PC1 and PC2, are connected behind FortiGate and can access the internet successfully. However, when the administrator adds a third PC to the network (PC3), the PC cannot connect to the internet.
Based on the information shown in the exhibit, which two configuration options can the administrator use to fix the connectivity issue for PC3? (Choose two.)

QUESTION 54
Which two statements about SSL VPN between two FortiGate devices are true? (Choose two.)

QUESTION 55
Which two statements about advanced AD access mode for the FSSO collector, agent are true?
(Choose two.)

QUESTION 56
Refer to the exhibits.



The exhibits show a diagram of a FortiGate device connected to the network, and the firewall policies configuration VIP configuration and IP pool configuration on the FortiGate device The WAN (port1) interface has the IP address 10.200. l. 1/24 The LAN (port3) interface has the IP address
10.0.1.254/24
The first firewall policy has NAT enabled using the IP pool The second firewall policy is configured with a VIP as the destination address.
Which IP address will be used to source NAT (SNAT) the internet traffic coming from a workstation with the IP address 10.0.1.10?

QUESTION 57
If Internet Service is already selected as Source in a firewall policy, which other configuration objects can be added to the Source field of a firewall policy?

QUESTION 58
Refer to the exhibit.

Review the intrusion prevention system (IPS) profile signature settings shown in the exhibit.
What do you conclude when adding theFTP.Login.Failedsignature to the IPS sensor profile?

QUESTION 59
What is the effect of enabling auto-negotiate on the phase 2 configuration of an IPsec tunnel?

QUESTION 60
Which two statements correctly describe the differences between IPsec main mode and IPsec aggressive mode? (Choose two.)

QUESTION 61
Refer to the exhibit.

The exhibit shows the IPS sensor configuration.
If traffic matches this IPS sensor, which two actions is the sensor expected to take? (Choose two.)

QUESTION 62
NGFW mode allows policy-based configuration for most inspection rules.
Which security profile’s configuration does not change when you enable policy-based inspection?

QUESTION 63
Refer to the exhibit.

The exhibit shows the FortiGuard Category Based Filter section of a corporate web filter profile.
An administrator must block access to download.com, which belongs to the Freeware and Software Downloads category. The administrator must also allow other websites in the same category.
What are two solutions for satisfying the requirement? (Choose two.)

QUESTION 64
To complete the final step of a Security Fabric configuration, an administrator must authorize all the devices on which device?

QUESTION 65
What are two features of collector agent advanced mode? (Choose two.)