最新なFortinet FCP_FGT_AD-7.4問題集（91題）、真実試験の問題を全部にカバー！

質問 1：
FortiGuard categories can be overridden and defined in different categories. To create a web rating override for the example.com home page the override must be configured using a specific syntax.
Which two syntaxes are correct to configure a web rating override for the home page? (Choose two.)
A. www.example.com:443
B. www.example.com/index.hrml
C. example.com
D. www.example.com
正解：C,D
解説: (Pass4Test メンバーにのみ表示されます)

質問 2：
What are two features of collector agent advanced mode? (Choose two.)
A. Advanced mode supports nested or inherited groups.
B. Advanced mode uses the Windows convention -NetBios: Domain\Username.
C. In advanced mode, security profiles can be applied only to user groups, not individual users.
D. In advanced mode, FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate.
正解：A,D
解説: (Pass4Test メンバーにのみ表示されます)

質問 3：
What are two features of FortiGate FSSO agentless polling mode? (Choose two.)
A. FortiGate uses the AD server as the collector agent.
B. FortiGate uses the SMB protocol to read the event viewer logs from the DCs.
C. FortiGate directs the collector agent to use a remote LDAP server.
D. FortiGate does not support workstation check.
正解：B,D
解説: (Pass4Test メンバーにのみ表示されます)

質問 4：
An employee needs to connect to the office through a high-latency internet connection.
Which SSL VPN setting should the administrator adjust to prevent SSL VPN negotiation failure?
A. SSL VPN session-ttl
B. SSL VPN login-timeout
C. SSL VPN dtls-hello-timeout
D. SSL VPN idle-timeout
正解：C
解説: (Pass4Test メンバーにのみ表示されます)

質問 5：
Which three methods are used by the collector agent for AD polling? (Choose three.)
A. FortiGate polling
B. WMI
C. WinSecLog
D. FSSO REST API
E. NetAPI
正解：B,C,E

質問 6：
Refer to the exhibits.



FGT-1 and FGT-2 are updated with HA configuration commands shown in the exhibit.
What would be the expected outcome in the HA cluster?
A. FGT-1 will remain the primary because FGT-2 has lower priority.
B. The HA cluster will become out of sync because the override setting must match on all HA members.
C. FGT-1 will synchronize the override disable setting with FGT-2.
D. FGT-2 will take over as the primary because it has the override enable setting and higher priority than FGT-1.
正解：D
解説: (Pass4Test メンバーにのみ表示されます)

質問 7：
Which inspection mode does FortiGate use for application profiles if it is configured as a profile-based next-generation firewall (NGFW)?
A. Certificate inspection
B. Flow-based inspection
C. Proxy-based inspection
D. Full content inspection
正解：B
解説: (Pass4Test メンバーにのみ表示されます)

質問 8：
Refer to the exhibit.

Based on the routing database shown in the exhibit which two conclusions can you make about the routes? (Choose two.)
A. There will be eight routes active in the routing table
B. The port1 and port2 default routes are active in the routing table
C. The port3 default route has the highest distance
D. The port3 default route has the lowest metric
正解：B,C
解説: (Pass4Test メンバーにのみ表示されます)

質問 9：
Refer to the exhibits.


The exhibits show the application sensor configuration and the Excessive-Bandwidth and Apple filter details.
Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?
A. Apple FaceTime will be allowed, based on the Video/Audio category configuration.
B. Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration.
C. Apple FaceTime will be allowed, based on the Apple filter configuration.
D. Apple FaceTime will be allowed only if the Apple filter in Application and Filter Overrides is set to Allow.
正解：B
解説: (Pass4Test メンバーにのみ表示されます)