Fortinet FCP_FGT_AD-7.6 Exam - Topic 2 Question 4 Discussion

Actual exam question for Fortinet's FCP_FGT_AD-7.6 exam

Question #: 4
Topic #: 2

An administrator wanted to configure an IPS sensor to block traffic that triggers a signature set number of times during a specific time period.

How can the administrator achieve the objective?

AUse IPS group signatures, set rate-mode 60.

BUse IPS packet logging option with periodical filter option.

CUse IPS filter, rate-mode periodical option.

DUse IPS filter, rate-mode periodical option.

Show Suggested Answer

Suggested Answer: C

The IPS filter with the rate-mode set to 'periodical' allows the administrator to block traffic that triggers a signature a specified number of times within a defined time period, meeting the requirement.

by Kimberlie at Jul 04, 2025, 11:41 PM

Limited Time Offer

25%

Off

Get Premium FCP_FGT_AD-7.6 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Latosha

2 months ago

A is also a valid option, but I prefer C for clarity.

upvoted 0 times

...

Clemencia

2 months ago

I’m not sure about this, can we really block that effectively?

upvoted 0 times

...

Gregg

3 months ago

Definitely agree with C, it makes the most sense!

upvoted 0 times

...

Rose

3 months ago

Wait, isn’t D the same as C? Seems confusing.

upvoted 0 times

...

Nakita

3 months ago

I think option C is the right choice for rate-mode.

upvoted 0 times

...

Aja

3 months ago

I feel like A could be a possibility too, but I thought group signatures were more about categorizing than blocking based on frequency.

upvoted 0 times

...

Darell

4 months ago

I’m a bit confused between C and D since they seem identical. Did we cover how to differentiate them in class?

upvoted 0 times

...

Denae

4 months ago

I remember practicing a question similar to this one, and I believe using the IPS filter with a periodical option is key.

upvoted 0 times

...

Carman

4 months ago

I think the answer might be C, but I'm not entirely sure about the specifics of the rate-mode settings.

upvoted 0 times

...

Chauncey

4 months ago

I'm confident I can solve this. The question is asking about blocking traffic based on a signature hit count, so I think option C or D is the way to go.

upvoted 0 times

...

Marsha

4 months ago

Okay, let's think this through step-by-step. I believe the key is to set up the IPS filter with the right rate-mode option.

upvoted 0 times

...

Deonna

5 months ago

Hmm, I'm a bit unsure about the difference between the "rate-mode" options. I'll need to review that part carefully.

upvoted 0 times

...

Scarlet

5 months ago

This looks like a straightforward IPS configuration question. I think I can handle this one.

upvoted 0 times

...

Josefa

7 months ago

Option C is the way to go, no doubt about it. As for the other options, I'm just glad they're not asking us to use a ouija board to configure the IPS sensor. That would be a real head-scratcher!

upvoted 0 times

Stevie

5 months ago

User 1: Option C is definitely the way to go.

upvoted 0 times

...

Phuong

7 months ago

Hold up, is this a trick question? If option D is the same as C, then I'm a bit suspicious. But hey, at least the options are clear and concise. I'll go with C just to be safe.

upvoted 0 times

...

Cristal

7 months ago

I'm not sure, but maybe using IPS filter with rate-mode periodical option could also work.

upvoted 0 times

...

Colby

7 months ago

D seems like a duplicate of C, so I'm going to go with option C as well. Can't go wrong with the classic IPS filter and rate-mode periodical combo.

upvoted 0 times

Cordelia

5 months ago

Definitely, it's a reliable method for configuring the IPS sensor.

upvoted 0 times

...

Silvana

5 months ago

Agreed, that's the classic choice for blocking traffic triggers.

upvoted 0 times

...

Silva

7 months ago

I think C is the way to go. IPS filter with rate-mode periodical.

upvoted 0 times

...

Chantell

7 months ago

I agree with Sena, using IPS group signatures with rate-mode 60 seems like the right approach.

upvoted 0 times

...

Jodi

7 months ago

I think option C is the way to go. Using the IPS filter with the rate-mode periodical option sounds like the most straightforward approach to achieving the desired objective.

upvoted 0 times

Crista

7 months ago

I think option A could also work by using IPS group signatures and setting the rate-mode to 60.

upvoted 0 times

...

Grover

7 months ago

I agree, option C seems like the most direct way to block traffic based on the signature set number of times during a specific time period.

upvoted 0 times

...

Sena

8 months ago

I think the administrator can achieve the objective by using IPS group signatures, set rate-mode 60.

upvoted 0 times

...