FCSS_NST_SE-7.4 practice questions 1–10

1. Question 1 · 71 in bank

   Refer to the exhibit, which shows the port1 interface configuration on FortiGate and partial session information for ICMP traffic.

   

   What happens to the session information if a routing change occurs that affects this session?

   • AOnly the interface and gateway information for dev=7 will be removed.
   • BThe session information will not change unless the current route has been removed from the routing table.
   • CThe session will be flagged as dirty but no route lookups will be performed.
   • DSessions involving port7 or port19 will not have their routing information flushed.

   Show answer

   Answer: B

   Next question

2. Question 2 · 71 in bank

   Refer to the exhibit, which shows the modified output of the routing kernel.

   

   Which statement is true?

   • AThe egress interface associated with static route 8.8.8.8/32 is administratively up.
   • BThe default static route through 10.200.1.254 is not in the forwarding information base.
   • CThe default static route through port2 is in the forwarding information base.
   • DThe BGP route to 10.0.4.0/24 is not in the forwarding information base.

   Show answer

   Answer: D

   Next question

3. Question 3 · 71 in bank

   Refer to the exhibit. The exhibit shows the output from using the command diagnose debug application samld -1 to diagnose a SAML connection.

   

   Based on this output, what can you conclude?

   • AActive Directory is used for authentication.
   • BThe authentication request is for an SSL VPN connection.
   • CThe IdP IP address is 10.1.10.254.
   • DThe IdP IP address is 10.1.10.2.

   Show answer

   Answer: D

   Next question

4. Question 4 · 71 in bank

   Refer to the exhibit, which shows the output of the command get router info bgp neighbors 100.64.2.254 advertised-routes.

   

   What can you conclude from the output?

   • AThe BGP state of the two BGP participants is OpenConfirm.
   • BThe router ID of the neighbor is 100.64.2.254.
   • CThe BGP neighbor is advertising the 10.20.30.40/24 network to the local router.
   • DThe local router is advertising the 10.20.30.40/24 network to its BGP neighbor.

   Show answer

   Answer: D

   Next question

5. Question 5 · 71 in bank

   Refer to the exhibit, which shows the partial output of a real-time OSPF debug.

   

   Why are the two FortiGate devices unable to form an adjacency?

   • AThe Hello packet is being sent from an OSPF router with ID 0.0.0.112.
   • BThe two FortiGate devices attempting adjacency are in area 0.0.0.0.
   • COne FortiGate device is configured to require authentication, while the other is not.
   • DThe passwords on the FortiGate devices do not match.

   Show answer

   Answer: C

   Next question

6. Question 6 · 71 in bank

   Select 3

   Refer to the exhibit, which shows one way communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.

   

   What three actions must you take to ensure successful communication? (Choose three.)

   • AYou must authorize the downstream FortiGate on the root FortiGate.
   • BFortiGate must not be in NAT mode.
   • CEnsure TCP port 8013 is not blocked along the way.
   • DYou must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.
   • EEnsure the port for Neighbor Discovery has been changed.

   Show answer

   Answer: ACD

   Next question

7. Question 7 · 71 in bank

   Refer to the exhibit, which shows the partial output of FortiOS kernel slabs.

   

   Which statement is true?

   • AThe total slab size of the sctp_session slab is 0 kB and is associated with the user space.
   • BThe total slab size of the ip_session slab is 3600 kB and is associated with the user space.
   • CThe total slab size of the ip6_session slab is 1300 kB and is associated with the kernel.
   • DThe total slab size of the tcp_session slab is 7500 kB and is associated with the kernel.

   Show answer

   Answer: D

   Next question

8. Question 8 · 71 in bank

   Refer to the exhibit, which a network topology and a partial routing table.

   

   FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3. Which changes must the administrator perform to ensure the server at 10.4.0.1/24 receives the echo reply from the laptop at 10.1.0.1/24?

   • AEnable asymmetric routing under config system settings.
   • BChange the configuration from strict RPF check mode to feasible RPF check mode.
   • CA firewall policy that allows all ICMP traffic from port3 to port1.
   • DModify the default gateway on the laptop from 10.1.0.2 to 10.2.0.2.

   Show answer

   Answer: A

   Next question

9. Question 9 · 71 in bank

   Select 2

   What are two functions of automation stitches? (Choose two.)

   • AYou can configure automation stitches on any FortiGate device in a Security Fabric environment.
   • BYou can configure automation stitches to execute actions sequentially by taking parameters from previous actions as input for the current action.
   • CYou can set an automation stitch configured to execute actions in parallel to insert a specific delay between actions.
   • DYou can create automation stitches to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.

   Show answer

   Answer: BD

   Next question

10. Question 10 · 71 in bank

    Refer to the exhibit, which contains the partial configuration of an IPsec VPN configuration.

    

    After reviewing the configuration, what can you conclude about the IPsec VPN Phase 1 setup?

    • AThe VPN is configured using IKEv2.
    • BDead Peer Detection is disabled.
    • CThe VPN is configured with DHCP over IPsec.
    • DThe tunnel is configured as a route-based VPN.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCSS_NST_SE-7.4 practice, question 1. 71 questions available.