Fortinet FCSS_EFW_AD-7.6 : FCSS - Enterprise Firewall 7.6 Administrator

Refer to the exhibit.

The FortiGuard security services on a FortiGate device is shown.
You need to find the web filter database signature on FortiGate to resolve issues with websites not being filtered correctly in a flow-mode web filter profile.
Why is the web filter database version not visible on the GUI, like it is with the intrusion prevention system (IPS) definitions?

• A. The web filter database is stored locally, but you must use the CLI command diagnose autoupdate versions to see the web filter database version.
• B. The web filter database is stored locally on FortiGate, but you must enable Web Fitter in the Feature Visibility section to see the web filter database version.
• C. The web filter database is not hosted on FortiGate; FortiGate queries FortiGuard or FortManager for web filter ratings on demand.
• D. The web filter database is accessible only after you add a web filter security profile in a firewall policy

An administrator must enable direct communication between multiple spokes in a company's network. Each spoke has more than one internet connection. The requirement is for the spokes to connect directly without passing through the hub, and for the links to automatically switch to the best available connection. How can this automatic detection and optimal link utilization between spokes be achieved?

• A. Utilize ADVPN 2.0 to facilitate dynamic direct tunnels and automatic link optimization.
• B. Set up OSPF routing over static VPN tunnels between spokes.
• C. Establish static VPN tunnels between spokes with predefined backup routes.
• D. Implement SD-WAN policies at the hub to manage spoke link quality.

What action can be taken on a FortiGate to block traffic using IPS protocol decoders, focusing on network transmission patterns and application signatures?

• A. Use application control to limit non-URL-based software handling.
• B. Configure a web filter profile in flow mode.
• C. Use the DNS filter to block application signatures and protocol decoders.
• D. Enable application detection-based SD-WAN rules.

Refer to the exhibit, which shows a command output.

FortiGate_A and FortiGate_B are members of an FGSP cluster in an enterprise network.
While testing the cluster using the ping command, the administrator monitors packet loss and found that the session output on FortiGate_B is as shown in the exhibit.
What could be the cause of this output on FortiGate_B?

• A. session-pickup-connectionless is set to disable on FortiGate_B.
• B. The session synchronization is encrypted.
• C. FortiGate_A and FortiGate_B have the same standalone-group-id value.
• D. FortiGate_B is configured in passive mode.

An administrator needs to install an IPS profile without triggering false positives that can impact applications and cause problems with the user's normal traffic flow. Which action can the administrator take to prevent false positives on IPS analysis?

• A. Use the IPS profile extension to select an operating system, protocol, and application for all the network internal services and users to prevent false positives.
• B. Enable Scan Outgoing Connections to avoid clicking suspicious links or attachments that can deliver botnet malware and create false positives.
• C. Use an IPS profile with action monitor, however, the administrator must be aware that this can compromise network integrity.
• D. Install missing or expired SSUTLS certificates on the client PC to prevent expected false positives.