1/3/25, 11:11 a.m. FortiGate 7.
4 Operator Exam: Attempt review
FCA - FortiGate 7.4 Operator Self-Paced
Started on Saturday, March 1, 2025, 3:15 PM
State Finished
Completed on Saturday, March 1, 2025, 4:08 PM
Time taken 52 mins 53 secs
Points 37/40
Grade 93 out of 100
Feedback Congratulations, you passed!
Question 1 What is the purpose of creating a firewall address object?
Correct
1 points out of 1 Select one:
To match the source or destination IP subnet
To specify the source and destination interfaces
To define the action for a firewall policy
To enable web filtering for a specific address
Question 2 How does FortiGate application control address evasion techniques used by peer-to-peer protocols?
Correct
1 points out of 1 Select one:
By analyzing flow-based inspection
By monitoring traffic for known patterns
By examining a URL block list
By allowing traffic from only well-known ports.
Question 3 How can administrators track successful authentication attempts in FortiGate?
Correct
1 points out of 1 Select one:
By reviewing the logs and dashboards
By utilizing advanced threat intelligence feeds
By analyzing network traffic patterns
By monitoring security events in real-time
Question 4 Why is it important to back up FortiGate system configurations regularly?
Correct
1 points out of 1 Select one:
To save time and effort in case of a hardware failure
To avoid errors while upgrading FortiOS
To ensure optimal performance of FortiGate
To prevent unexpected configuration changes
Question 5 What are some of the features provided by IPSec VPNs?
Correct
1 points out of 1 Select one:
Data encryption and load balancing
Network segmentation and packet inspection
Bandwidth optimization and antireplay protection
Data authentication and data integrity
Question 6 Which inspection mode processes and forwards each packet, without waiting for the complete file or web page?
Correct
1 points out of 1 Select one:
Stateful inspection
Proxy-based inspection
Application-level inspection
Flow-based inspection
Question 7 Which piece of information does FortiGate know about the user without firewall authentication?
Correct
1 points out of 1 Select one:
The application being used
The originating domain name
The user login name
The source IP address
https://training.fortinet.com/mod/quiz/review.php?attempt=21290867&cmid=485066 1/5
1/3/25, 11:11 a.m. FortiGate 7.4 Operator Exam: Attempt review
Question 8 What is the recommended process to configure FortiGate for remote authentication for user identification?
Incorrect
0 points out of 1 Select one:
Create a user group, map authenticated remote users to the group, and configure a firewall policy with the user group as the source.
Create a user group and configure a firewall policy with the group as the source.
Create a user account, configure a firewall policy with the user account as the source, and verify the configuration using logs.
Connect FortiGate to a remote authentication server and configure its IP addresses as the source.
Question 9 What protocol is used to dynamically create IPSec VPN tunnels?
Correct
1 points out of 1 Select one:
Generic Route Encapsulation (GRE)
Point-to-Point Tunneling Protocol (PPTP)
Layer 2 Tunneling Protocol (L2TP)
Internet Key Exchange Version 2 (IKEv2)
Question 10 Which actions can you apply to application categories in the Application Control profile?
Correct
1 points out of 1 Select one:
Monitor, allow, block, or quarantine
Allow, encrypt, compress, or redirect
Monitor, optimize, redirect, or shape
Authenticate, log, encrypt, or back up
Question 11 What is a scenario where automation is used in the Fortinet Security Fabric?
Correct
1 points out of 1 Select one:
Generating weekly reports for management review
Automatically quarantining a computer with malicious activity
Monitoring disk space utilization on FortiAnalyzer
Assigning security ratings to newly added devices
Question 12 How do you configure an internet service as the destination in a firewall policy?
Correct
1 points out of 1 Select one:
Choose the IP subnet of the service.
Specify the MAC address of the service.
Select the service from the ISDB.
Configure the service with a virtual IP.
Question 13 Which two items should you configure as the source of a firewall policy, to allow all internal users in a small office to access the internet? (Choose two.)
Correct
1 points out of 1 Select one or more:
The IP subnet of the LAN
Application signatures
Users or user groups
Security profiles
Question 14 Which condition could prevent a configured route from being added to the FortiGate routing table?
Correct
1 points out of 1 Select one:
The DHCP server associated with the route being disabled
The incorrect distance being set for the default gateway IP address
The presence of a better route for the same destination
The absence of administrative access protocols on the interface
Question 15 What is the security rating in the Fortinet Security Fabric, and how is it calculated?
Correct
1 points out of 1 Select one:
It indicates the level of compatibility with third-party devices.
It represents the current level of network performance.
It is calculated based on the number of security logs generated.
It is a numerical value based on device settings and best practices.
Question 16 Which two protocols can you use for administrative access on a FortiGate interface?
Correct
1 points out of 1 Select one:
Simple Mail Transfer Protocol (SMTP) and Secure Sockets Layer (SSL)
Telnet and Simple Network Management Protocol (SNMP)
Remote Desktop Protocol (RDP) and Hypertext Transfer Protocol (HTTP)
Hypertext Transfer Protocol Secure (HTTPS) and Secure Shell (SSH)
https://training.fortinet.com/mod/quiz/review.php?attempt=21290867&cmid=485066 2/5
1/3/25, 11:11 a.m. FortiGate 7.4 Operator Exam: Attempt review
Question 17 What is the main advantage of using Secure Socket Layer Virtual Private Network (SSL VPN) in web mode?
Correct
1 points out of 1 Select one:
Access to all network resources for remote users
Support for a wide range of applications and protocols
Ability to perform client integrity checks
No need to install client software
Question 18 You need to examine the logs related to local users watching YouTube videos. Where can you find those logs?
Correct
1 points out of 1 Select one:
Log and Report > Security Events > Application Control
Log and Report > Security Events > Intrusion Prevention
Log and Report > Security Events > Antivirus
Log and Report > Security Events > WebFilter
Question 19 When configuring a static route on FortiGate, what does the destination represent?
Correct
1 points out of 1 Select one:
The local interface on FortiGate for the outgoing traffic
The IP address of the next-hop router
The IP address of the remote DNS server
The network or host to which traffic will be forwarded
Question 20 What are the three key categories of services provided by FortiGuard Labs?
Correct
1 points out of 1 Select one:
Threat hunting, intrusion detection, and firewall management
Machine learning, antivirus, and network monitoring
Artificial intelligence, real-time threat protection, and outbreak alerts
Data encryption, network segmentation, and access control
Question 21 Which action can you take to improve the security rating provided by the Fortinet Security Fabric?
Correct
1 points out of 1 Select one:
Upgrade FortiGate to the latest mature version available.
Apply one or more of the suggested best practices.
Create a configuration revision or back up the configuration.
Run the integrity check on all end devices.
Question 22 Excluding the steps for tuning the sensors, what is the last step involved in configuring IPS on FortiGate?
Correct
1 points out of 1 Select one:
Applying the sensor to a firewall policy
Enabling SSL inspection for the traffic of interest
Editing the sensor's signature and filters
Blocking malicious URLs and botnet command-and-control (C&C) traffic
Question 23 What is the key difference between Secure Sockets Layer (SSL) certificate inspection and SSL deep inspection?
Correct
1 points out of 1 Select one:
SSL certificate inspection decrypts and inspects encrypted content, while SSL deep inspection verifies the identity of the web server.
SSL certificate inspection introduces certificate errors, while SSL deep inspection prevents certificate warnings.
SSL certificate inspection applies to only HTTPS traffic, while SSL deep inspection applies to multiple SSL-encrypted protocols.
SSL certificate inspection requires a trusted certificate authority (CA), while SSL deep inspection uses the FortiGate CA certificate.
Question 24 In addition to central processing unit (CPU) and memory usage, what are two other key performance parameters you should monitor on FortiGate? (Choose
Correct two.)
1 points out of 1
Select one or more:
Number of SSL sessions
Number of local users and user groups
Number of days for licenses to expire
Number of active VPN tunnels
Question 25 What is the purpose of the FortiGuard Labs signature database?
Correct
1 points out of 1 Select one:
To identify and correct vulnerabilities in FortiGate firewalls
To give FortiGate firewalls the ability to track network traffic and usage patterns
To provide secure configuration templates to FortiGate firewalls
To keep FortiGate firewalls protected against the latest malware variants
https://training.fortinet.com/mod/quiz/review.php?attempt=21290867&cmid=485066 3/5
1/3/25, 11:11 a.m. FortiGate 7.4 Operator Exam: Attempt review
Question 26 What are two benefits of performing regular maintenance on FortiGate firewalls? (Choose two.)
Correct
1 points out of 1 Select one or more:
Meet compliance and legal requirements.
Minimize costs during upgrades.
Ensure you have the latest hardware.
Prevent security breaches in your organization.
Question 27 Which two steps are involved in configuring web filtering based on FortiGuard category filters? (Choose two.)
Incorrect
0 points out of 1 Select one or more:
Upgrade FortiOS to obtain the latest database from FortiGuard.
Create a web filtering security profile using FortiGuard category-based filters.
Apply the web filter security profile to the appropriate firewall policy.
Identify the specific websites to be blocked or allowed.
Question 28 Why is Secure Socket Layer (SSL) inspection necessary for the intrusion prevention system (IPS) to detect threats in encrypted traffic?
Correct
1 points out of 1 Select one:
The IPS engine can inspect only legacy encryption algorithms, by default.
SSL inspection improves network performance by bypassing encrypted traffic.
Without SSL inspection, encrypted traffic is automatically blocked by the IPS.
SSL inspection allows the IPS to detect and analyze encrypted threats.
Question 29 Which two options can you use for centralized logging when you configure the Fortinet Security Fabric? (Choose two.)
Correct
1 points out of 1 Select one or more:
FortiAnalyzer
Syslog server
FortiGate Cloud
FortiSOAR
Question 30 What is a characteristic of a firewall policy used to allow the traffic from Secure Socket Layer Virtual Private Network (SSL VPN) connections?
Correct
1 points out of 1 Select one:
It defines the port number used for the SSL VPN portal.
It uses a virtual tunnel interface in the source field.
It encapsulates the traffic using the VPN settings configured.
It assigns SSL certificates to user groups trying to connect.
Question 31 What is grayware?
Correct
1 points out of 1 Select one:
Known malware with existing signatures
Malicious files sent to the sandbox for inspection
New and unknown malware variants
Unsolicited programs installed without user consent
Question 32 How does the FortiGate intrusion prevention system (IPS) use signatures to detect malicious traffic?
Correct
1 points out of 1 Select one:
By monitoring user activity on websites
By decrypting Secure Sockets Layer (SSL)-encrypted traffic
By blocking all network traffic
By comparing network packets to known threats
Question 33 How are websites filtered using FortiGuard category filters?
Incorrect
0 points out of 1 Select one:
By examining the HTTP headers from the website
By scanning the website for malware in real time
By denying access based on the website IP address
By blocking access based on the website content
Question 34 How does FortiGate handle blocked websites in web filtering using FortiGuard category filters?
Correct
1 points out of 1 Select one:
Users are prompted to provide a valid username and password for access.
Users receive a warning message but can choose to continue accessing the website.
Users are allowed to access the website, but their activity is recorded in the FortiGate logs.
Users are redirected to a replacement message indicating the website is blocked.
https://training.fortinet.com/mod/quiz/review.php?attempt=21290867&cmid=485066 4/5
1/3/25, 11:11 a.m. FortiGate 7.4 Operator Exam: Attempt review
Question 35 What are two reasons why FortiGate Secure Socket Layer Virtual Private Network (SSL VPN) is considered cost-effective compared to other vendors? (Choose
Correct two.)
1 points out of 1
Select one or more:
Because it supports a limited number of third-party applications.
Because it provides full network access to remote users.
Because the number of remote users is determined by the model.
Because it does not require an additional license.
Question 36 What are two activities that cybercriminals can perform using malware? (Choose two.)
Correct
1 points out of 1 Select one or more:
Extort money
Trigger a high availability (HA) failover
Damage physical ports
Steal intellectual property
Question 37 What are two reasons why organizations and individuals use web filtering? (Choose two.)
Correct
1 points out of 1 Select one or more:
To preserve employee productivity
To prevent network congestion
To enhance their users’ experience
To increase network bandwidth
Question 38 What is the potential security risk associated with Hypertext Transfer Protocol Secure (HTTPS)?
Correct
1 points out of 1 Select one:
Encrypted malicious traffic
Certificate errors during SSL handshake
Increased network latency
Incompatibility with certain web browsers
Question 39 Which two additional features and settings can you apply to traffic after it is accepted by a firewall policy? (Choose two.)
Correct
1 points out of 1 Select one or more:
Packet filtering
User authentication
Application control
Antivirus scanning
Question 40 Why is the order of firewall policies important?
Correct
1 points out of 1 Select one:
To allow for a faster processing of high priority traffic
To ensure that the security traffic is logged before the normal traffic
To avoid conflicts with other policies in the table with similar parameters
To ensure more granular policies are checked and applied before more general policies
https://training.fortinet.com/mod/quiz/review.php?attempt=21290867&cmid=485066 5/5
