100% Free Fortinet FCP_FGT_AD-7.4 Practice Test Questions

Question 1

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements are true about the requirements of connected physical interfaces on FortiGate? (Choose two.)

A : Both interfaces must have the interface role assigned

B : Both interfaces must have directly connected routes on the routing table

C : Both interfaces must have DHCP enabled

D : Both interfaces must have IP addresses assigned

Answer: B,D

Question 2

Refer to the exhibit

An administrator is running a sniffer command as shown in the exhibit.

Which three pieces of information are included in the sniffer output? (Choose three.)

A : Interface name

B : Ethernet header

C : IP header

D : Application header

E : Packet payload

Answer: A,C,E

Question 3

Refer to the exhibit.

In the network shown in the exhibit, the web client cannot connect to the HTTP web server. The administrator runs the FortiGate built-in sniffer and gets the output as shown in the exhibit.

What should the administrator do next to troubleshoot the problem?

A : Run a sniffer on the web server.

B : Capture the traffic using an external sniffer connected to port1.

C : Execute another sniffer in the FortiGate, this time with the filter “host 10.0.1.10”

D : Execute a debug flow.

Answer: D

Question 4

FortiGate is operating in NAT mode and has two physical interfaces connected to the LAN and DMZ networks respectively. Which two statements are true about the requirements of connected physical interfaces on FortiGate? (Choose two.)

A : Both interfaces must have the interface role assigned

B : Both interfaces must have directly connected routes on the routing table

C : Both interfaces must have DHCP enabled

D : Both interfaces must have IP addresses assigned

Answer: B,D

Question 5

Refer to the exhibits.The exhibits show a firewall policy (Exhibit A) and an antivirus profile (Exhibit B).

Why is the user unable to receive a block replacement message when downloading an infected file for the first time?

A : The volume of traffic being inspected is too high for this model of FortiGate.

B : The intrusion prevention security profile needs to be enabled when using flow-based inspection mode.

C : The firewall policy performs the full content inspection on the file.

D : The flow-based inspection is used, which resets the last packet to the user.

Answer: D

Free Practice Fortinet FCP_FGT_AD-7.4 Exam Questions 2025