FCSS_EFW_AD-7.6 Fortinet Exam Questions and Free Practice Test

Question 7

An administrator configured the FortiGate devices in an enterprise network to join the Fortinet Security Fabric. The administrator has a list of IP addresses that must be blocked by the data center firewall. This list is updated daily.
How can the administrator automate a firewall policy with the daily updated list?

A. With FortiNAC

B. With FortiAnalyzer

C. With a Security Fabric automation

D. With an external connector from Threat Feeds

Correct Answer:D

Question 8

A company's users on an IPsec VPN between FortiGate A and B have experienced intermittent issues since implementing VXLAN. The administrator suspects that packets exceeding the 1500-byte default MTU are causing the problems.
In which situation would adjusting the interface??s maximum MTU value help resolve issues caused by protocols that add extra headers to IP packets?

A. Adjust the MTU on interfaces only if FortiGate has the FortiGuard enterprise bundle, which allows MTU modification.

B. Adjust the MTU on interfaces in all FortiGate devices that support the latest family of Fortinet SPUs: NP7, CP9 and SP5.

C. Adjust the MTU on interfaces in controlled environments where all devices along the path allow MTU interface changes.

D. Adjust the MTU on interfaces only in wired connections like PPPoE, optic fiber, and ethernet cable.

Correct Answer:C

Question 9

Refer to the exhibit, which shows a partial troubleshooting command output.
FCSS_EFW_AD-7.6 dumps exhibit
An administrator is extensively using IPsec on FortiGate. Many tunnels show information similar to the output shown in the exhibit.
What can the administrator conclude?

A. IPsec SAs cannot be offloaded.

B. The two IPsec SAs, inbound and outbound, are copied to the NPU.

C. Only the outbound IPsec SA is copied to the NPU.

D. Only the inbound IPsec SA is copied to the NPU.

Correct Answer:B

Question 10

Refer to the exhibit, which shows a corporate network and a new remote office network.
FCSS_EFW_AD-7.6 dumps exhibit
An administrator must integrate the new remote office network with the corporate enterprise network.
What must the administrator do to allow routing between the two networks?

A. The administrator must implement BGP to inject the new remote office network into the corporate FortiGate device

B. The administrator must configure a static route to the subnet 192.168.l.0/24 on the corporate FortiGate device.

C. The administrator must configure virtual links on both FortiGate devices.

D. The administrator must implement OSPF over IPsec on both FortiGate devices.

Correct Answer:D

Question 11

Refer to the exhibit, which shows the packet capture output of a three-way handshake between FortiGate and FortiManager Cloud.
FCSS_EFW_AD-7.6 dumps exhibit
What two conclusions can you draw from the exhibit? (Choose two.)

A. FortiGate will receive a certificate that supports multiple domains because FortiManager operates in a cloud computing environment.

B. FortiGate is connecting to the same IP server and will receive an independent certificatefor its connection between FortiGate and FortiManager Cloud.

C. If the TLS handshake contains 17 cipher suites it means the TLS version must be 1.0 on this three-way handshake.

D. The wildcard for the domain *.fortinet-ca2.support.fortinet.com must be supported by FortiManager Cloud.

Correct Answer:D

Question 12

An administrator must standardize the deployment of FortiGate devices across branches with consistent interface roles and policy packages using FortiManager.
What is the recommended best practice for interface assignment in this scenario?

A. Enable metadata variables to use dynamic configurations in the standard interfaces of FortiManager.

B. Use the Install On feature in the policy package to automatically assign different interfaces based on the branch.

C. Create interfaces using device database scripts to use them on the same policy package of FortiGate devices.

D. Create normalized interface types per-platform to automatically recognize device layer interfaces based on the FortiGate model and interface name.

Correct Answer:A

START FCSS_EFW_AD-7.6 EXAM