Free Fortinet FCP_FGT_AD-7.4 Practice Test & Real Exam Questions

Exam Code/Number: FCP_FGT_AD-7.4
Exam Name/Title: FCP - FortiGate 7.4 Administrator
Certification Provider: Fortinet
Corresponding Certification: FCP in Network Security

Exam Questions: 91
Updated On: Oct 05, 2026

Question #11

Which three statements about SD-WAN zones are true? (Choose three.)

A. You can use an SD-WAN zone in static route definitions

B. An SD-WAN zone is a logical grouping of members

C. An SD-WAN zone can contain physical and logical interfaces

D. An SD-WAN zone must contains at least two members

E. You can define up to three SD-WAN zones per FortiGate device

Discussion 0

Correct Answer: A,B,C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #12

A FortiGate firewall policy is configured with active authentication however, the user cannot authenticate when accessing a website.
Which protocol must FortiGate allow even though the user cannot authenticate?

A. DHCP

B. ICMP

C. DNS

D. LDAP

Discussion 0

Correct Answer: C Vote an answer

Question #13

Refer to the exhibit.

The administrator configured SD-WAN rules and set the FortiGate traffic log page to display SD-WAN-specific columns: SD-WAN Quality and SD-WAN Rule Name.
FortiGate allows the traffic according to policy ID 1. This is the policy that allows SD-WAN traffic.
Despite these settings the traffic logs do not show the name of the SD-WAN rule used to steer those traffic flows.
What can be the reason?

A. There is no application control profile applied to the firewall policy.

B. FortiGate load balanced the traffic according to the implicit SD-WAN rule.

C. Destination in the SD-WAN rules are configured per application but the feature visibility is not enabled.

D. SD-WAN rule names do not appear immediately. The administrator needs to refresh the page.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #14

There are multiple dial-up IPsec VPNs configured in aggressive mode on the HQ FortiGate. The requirement is to connect dial-up users to their respective department VPN tunnels.
Which phase 1 setting you can configure to match the user to the tunnel?

A. Peer ID

B. Local Gateway

C. Dead Peer Detection

D. IKE Mode Config

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #15

An administrator manages a FortiGate model that supports NTurbo.
How does NTurbo enhance performance for flow-based inspection?

A. NTurbo offloads traffic to the content processor.

B. NTurbo buffers the whole file and then sends it to the antivirus engine.

C. NTurbo creates two inspection sessions on the FortiGate device.

D. NTurbo creates a special data path to redirect traffic between the IPS engine its ingress and egress interfaces.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #16

Refer to the exhibits.

The exhibits show the application sensor configuration and the Excessive-Bandwidth and Apple filter details.
Based on the configuration, what will happen to Apple FaceTime if there are only a few calls originating or incoming?

A. Apple FaceTime will be allowed, based on the Apple filter configuration.

B. Apple FaceTime will be blocked, based on the Excessive-Bandwidth filter configuration.

C. Apple FaceTime will be allowed only if the Apple filter in Application and Filter Overrides is set to Allow.

D. Apple FaceTime will be allowed, based on the Video/Audio category configuration.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #17

The HTTP inspection process in web filtering follows a specific order when multiple features are enabled in the web filter profile.
Which order must FortiGate use when the web filter profile has features such as safe search enabled?

A. FortiGuard category filter and rating filter

B. DNS-based web filter and proxy-based web filter

C. Static URL filter, FortiGuard category filter, and advanced filters

D. Static domain filter, SSL inspection filter, and external connectors filters

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #18

What are two features of the NGFW profile-based mode? (Choose two.)

A. NGFW profile-based mode must require the use of central source NAT policy

B. NGFW profile-based mode supports applying applications and web filtering profiles in a firewall policy.

C. NGFW profile-based mode can only be applied globally and not on individual VDOMs.

D. NGFW profile-based mode policies support both flow inspection and proxy inspection.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #19

Which statement correctly describes NetAPI polling mode for the FSSO collector agent?

A. The NetSessionEnum function is used to track user logouts.

B. The collector agent uses a Windows API to query DCs for user logins.

C. The collector agent must search Windows application event logs.

D. NetAPI polling can increase bandwidth usage in large networks.

Discussion 0

Correct Answer: A Vote an answer

Question #20

An administrator wants to configure dead peer detection (DPD) on IPsec VPN for detecting dead tunnels. The requirement is that FortiGate sends DPD probes only when there is outbound traffic but no response from the peer.
Which DPD mode on FortiGate meets this requirement?

A. On Demand

B. On Idle

C. Disabled

D. Enabled

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Download Free Fortinet FCP_FGT_AD-7.4 Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet FCP_FGT_AD-7.4 exam.