FCP Fortinet Security Fabric Integration & Troubleshooting 3

Question 1

Which protocol does FortiGate use by default to communicate with other Security Fabric members for topology discovery and synchronization?

Accepted Answer

Security Fabric over TCP port 8013

Answer

Security Fabric members communicate using a proprietary protocol over TCP port 8013 for topology and synchronization data.

Question 2

An administrator wants FortiClient registered to FortiClient EMS to automatically receive posture tags that are then enforced by FortiGate policy. Which configuration is required?

Accepted Answer

Add FortiClient EMS as a Fabric Connector on the root FortiGate

Answer

Adding FortiClient EMS as a Fabric Connector allows FortiGate to pull EMS endpoint tags and use them as dynamic firewall policy conditions.

Question 3

When a FortiSwitch is managed by FortiGate via FortiLink, which statement about VLAN provisioning is correct?

Accepted Answer

FortiGate pushes VLAN and port configurations to FortiSwitch through the FortiLink interface

Answer

In FortiLink mode, FortiGate acts as the controller and pushes all VLAN and port configurations down to managed FortiSwitch units.

Question 4

A Security Fabric topology shows a FortiAP in 'Offline' state despite the AP being physically connected and powered. What is the most likely troubleshooting step?

Accepted Answer

Verify the FortiGate wireless controller settings and check for CAPWAP tunnel connectivity to the AP

Answer

FortiAP offline status typically indicates a CAPWAP tunnel failure between the AP and the FortiGate wireless controller, which should be verified first.

Question 5

What does the 'Security Rating' check 'Admin Accounts with Default Passwords' specifically evaluate?

Accepted Answer

Whether any administrator still uses the factory-default 'admin' password on Fabric-connected devices

Answer

This Security Rating check flags any Fabric-connected device where the admin account retains the factory-default empty or 'admin' password.

(FCP) Fortinet Certified Professional Security Operations Practice Test

(FCP) Fortinet Certified Professional Security Operations Practice Test

FCP Fortinet Security Fabric Integration & Troubleshooting 3