FCP Fortinet Security Fabric Integration & Troubleshooting 4

Question 1

Which Security Fabric Automation trigger can be used to automatically block an IP address when a FortiGate IPS signature fires?

Accepted Answer

FortiOS Event trigger on 'IPS Alert'

Answer

The FortiOS Event trigger type within a Fabric stitch can react to IPS Alert events and execute blocking actions automatically.

Question 2

An administrator configures a Security Fabric with a FortiGate root and two downstream FortiGates, but only one downstream appears in the topology. What should be verified on the missing downstream?

Accepted Answer

That Security Fabric is enabled and the correct upstream FortiGate IP and pre-shared key are configured

Answer

For a downstream FortiGate to join the Fabric, Security Fabric must be enabled with the correct upstream IP and matching pre-shared key.

Question 3

What is the function of the 'FortiGate Cloud' Fabric Connector?

Accepted Answer

It integrates cloud provider metadata (AWS/Azure/GCP) as dynamic address objects in FortiGate policies

Answer

The cloud Fabric Connectors (AWS, Azure, GCP) pull instance metadata and tags from cloud providers and expose them as dynamic address objects for policy use.

Question 4

A FortiGate administrator runs 'diagnose test application csf 1' and sees 'Fabric status: disconnected'. After confirming the pre-shared key is correct, what is the next troubleshooting step?

Accepted Answer

Check network reachability and verify TCP port 8013 is not blocked between the devices

Answer

If the pre-shared key is correct but the Fabric is disconnected, network reachability issues or firewall rules blocking TCP 8013 are the next likely cause.

Question 5

In a Security Fabric, which device is responsible for sending Security Rating results to FortiGuard for benchmarking against other organizations?

Accepted Answer

The root FortiGate on behalf of the entire Security Fabric

Answer

The root FortiGate collects Security Rating data from all Fabric members and submits the aggregated score to FortiGuard for industry benchmarking.

(FCP) Fortinet Certified Professional Security Operations Practice Test

(FCP) Fortinet Certified Professional Security Operations Practice Test

FCP Fortinet Security Fabric Integration & Troubleshooting 4