Fortinet FCP_FGT_AD-7.4 Actual Free Exam Questions & Community Discussion

Exam Code/Number: FCP_FGT_AD-7.4
Exam Name/Title: FCP - FortiGate 7.4 Administrator
Certification Provider: Fortinet
Corresponding Certification: FCP in Network Security

Exam Questions: 91
Updated On: Jul 20, 2026

Question #1

A network administrator is configuring an IPsec VPN tunnel for a sales employee travelling abroad.
Which IPsec Wizard template must the administrator apply?

A. Remote Access

B. Dial up User

C. iHub-and-Spoke

D. Site to Site

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #2

What are two features of collector agent advanced mode? (Choose two.)

A. Advanced mode uses the Windows convention -NetBios: Domain\Username.

B. In advanced mode, security profiles can be applied only to user groups, not individual users.

C. Advanced mode supports nested or inherited groups.

D. In advanced mode, FortiGate can be configured as an LDAP client and group filters can be configured on FortiGate.

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #3

Which two statements describe how the RPF check is used? (Choose two.)

A. The RPF check is a mechanism that protects FortiGate and the network from IP spoofing attacks.

B. The RPF check is run on the first reply packet of any new session.

C. The RPF check is run on the first sent packet of any new session.

D. The RPF check is run on the first sent and reply packet of any new session.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #4

Which three methods are used by the collector agent for AD polling? (Choose three.)

A. NetAPI

B. WinSecLog

C. FortiGate polling

D. WMI

E. FSSO REST API

Discussion 0

Correct Answer: A,B,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #5

Refer to the exhibits, which show the firewall policy and an antivirus profile configuration.

Why is the user unable to receive a block replacement message when downloading an infected file for the first time?

A. The intrusion prevention security profile must be enabled when using flow-based inspection mode.

B. Flow-based inspection is used, which resets the last packet to the user.

C. The firewall policy performs a full content inspection on the file.

D. The option to send files to FortiSandbox for inspection is enabled.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #6

Refer to the exhibits.

The exhibits show a diagram of a FortiGate device connected to the network, VIP configuration, firewall policy. and the sniffer CLI output on the FortiGate device.
The WAN (port1) interface has the IP address 10.200.1.1 /24.
The LAN (port3) interface has the IP address 10.0.1.254/24.
The webserver host (10. 0.1. 10) must use its VIP external IP address as the source NAT (SNAT) when It pings remote server (10.200.3.1).
Which two statements are valid to achieve this goal? (Choose two.)

A. Disable port forwarding on the VIP object.

B. Disable NAT on the lnternet_Access firewall policy.

C. Create a new firewall policy before lnternet_Access for the webserver and apply the IP pool.

D. Enable NAT on the Allow_access firewall policy.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #7

Refer to the exhibit.

Examine the intrusion prevention system (IPS) diagnostic command shown in the exhibit.
If option 5 is used with the IPS diagnostic command and the outcome is a decrease in the CPU usage, what is the correct conclusion?

A. The IPS engine is unable to prevent an intrusion attack.

B. The IPS engine will continue to run in a normal state.

C. The IPS engine is inspecting a high volume of traffic.

D. The IPS engine is blocking all traffic.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #8

An administrator has configured the following settings:

What are the two results of this configuration? (Choose two.)

A. Denied users are blocked for 30 minutes.

B. A session for denied traffic is created.

C. The number of logs generated by denied traffic is reduced.

D. Device detection on all interfaces is enforced for 30 minutes.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #9

Refer to the exhibit to view the firewall policy.

Why would the firewall policy not block a well-known virus, for example eicar?

A. The action on the firewall policy is not set to deny.

B. Web filter is not enabled on the firewall policy to complement the antivirus profile.

C. The firewall policy is not configured in proxy-based inspection mode.

D. The firewall policy does not apply deep content inspection.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #10

Refer to the exhibit.

Why did FortiGate drop the packet?

A. It failed the RPF check.

B. 11 matched an explicitly configured firewall policy with the action DENY

C. It matched the default implicit firewall policy

D. The next-hop IP address is unreachable.

Discussion 0

Correct Answer: C Vote an answer

Download Free Fortinet FCP_FGT_AD-7.4 Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet FCP_FGT_AD-7.4 exam.