FCSS_NST_SE-7.4 practice questions 21–30

1. Question 21 · 71 in bank

   Select 2

   FortiGate performs different actions when in conserve mode depending on the configured memory thresholds. Which actions correlates to which thresholds? (Choose two.)

   • AFortiGate exits conserve mode when the system memory goes below the configured green threshold.
   • BFortiGate starts dropping all new sessions when the system memory reaches the configured red threshold.
   • CFortiGate enters conserve mode when the system memory reaches the configured extreme threshold.
   • DFortiGate starts taking the configured action for new sessions requiring content inspection when the system memory reaches the configured red threshold.

   Show answer

   Answer: AD

   Next question

2. Question 22 · 71 in bank

   Select 2

   Refer to the exhibits, which contain the partial configurations of two VPNs on FortiGate.

   

   An administrator has configured two VPNs for two different user groups. Users who are in the Users-2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovers that FortiGate is not matching the user-2 VPN for members of the Users-2 group. Which two changes must the administrator make to fix the issue? (Choose two.)

   • AChange to aggressive mode on both VPNs.
   • BEnable XAuth on both VPNs.
   • CUse different pre-shared keys on both VPNs.
   • DSet up specific peer IDs on both VPNs.

   Show answer

   Answer: AD

   Next question

3. Question 23 · 71 in bank

   Refer to the exhibit.

   

   An IPsec VPN tunnel is dropping, as shown by the debug output. Analyzing the debug output, what could be causing the tunnel to go down?

   • APhase 2 drops but Phase 1 is up.
   • BDead Peer Detection is not receiving its acknowledge packet.
   • CThe tunnel drops during rekey negotiation.
   • DThe tunnel drops after the timer expires.

   Show answer

   Answer: B

   Next question

4. Question 24 · 71 in bank

   Select 3

   Refer to the exhibit, which shows two entries that were generated in the FSSO collector agent logs.

   

   What three conclusions can you draw from these log entries? (Choose three.)

   • AThe user's status shows as "not verified" in the collector agent.
   • BThe FortiGate firmware version is not compatible with that of the collector agent.
   • CRemote registry is not running on the workstation.
   • DDNS resolution is unable to resolve the workstation name.
   • EA firewall is blocking traffic to port 139 and 445.

   Show answer

   Answer: ACE

   Next question

5. Question 25 · 71 in bank

   Refer to the exhibit, which shows a partial web filter profile configuration.

   

   The URL www.dropbox.com is categorized as File Sharing and Storage. Which action does FortiGate take if a user attempts to access www.dropbox.com?

   • AFortiGate blocks the connection as an invalid URL.
   • BBased on the URL Filter configuration, FortiGate allows the connection.
   • CFortiGate blocks the connection, based on the FortiGuard category-based filter configuration.
   • DBased on the Web Content filter configuration, access to www.dropbox.com would be exempted.

   Show answer

   Answer: B

   Next question

6. Question 26 · 71 in bank

   Select 2

   The local OSPF router is unable to establish adjacency with a peer. Which two things should the administrator do to troubleshoot the issue? (Choose two.)

   • ACheck whether TCP port 179 is blocked.
   • BCheck if there is an active static route to the peer.
   • CCheck whether both peers have an IP address within the same subnet.
   • DCheck if IP protocol 89 is blocked.

   Show answer

   Answer: CD

   Next question

7. Question 27 · 71 in bank

   Select 3

   Refer to the exhibit.

   

   Which three pieces of information does the diagnose sys top command provide? (Choose three.)

   • AThe miglogd daemon is running on CPU core ID 0.
   • BThe diagnose sys top command has been running for 18 minutes.
   • CThe cmdbsvr process is occupying 2.4% of the total user memory space.
   • DThe miglogd daemon would be on top of the list, if the administrator pressed m on the keyboard.
   • EIf the newcli daemon continues to be in the R state, it will need to be manually restarted.

   Show answer

   Answer: ACD

   Next question

8. Question 28 · 71 in bank

   Refer to the exhibit, which shows a partial output from the get router info routing-table database command.

   

   The administrator wants to configure a default static route for port3 and assign a distance of 50 and a priority of 0. What will happen to the port1 and port2 default static routes after the port3 default static route is created?

   • AThe port2 default static route will be injected into the forwarding information base (FIB).
   • BThe port1 default static route will be injected into the FIB.
   • CNeither of the routes shown in the output will be injected into the FIB.
   • DBoth default static routes shown in the output will be injected into the FIB.

   Show answer

   Answer: A

   Next question

9. Question 29 · 71 in bank

   Select 3

   Which three common FortiGate-to-collector-agent connectivity issues can you identify using the FSSO real-time debug? (Choose three.)

   • ALog is full on the collector agent.
   • BInability to reach IP address of the collector agent.
   • CRefused connection. Potential mismatch of TCP port.
   • DMismatched pre-shared password.
   • EIncompatible collector agent software version.

   Show answer

   Answer: BCD

   Next question

10. Question 30 · 71 in bank

    Refer to the exhibit, which shows a FortiGate configuration.

    

    An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy. What must the administrator do to fix the issue?

    • ADisable webfilter-force-off at the VDOM level.
    • BSet sdns-server-ip to service.fortiguard.net.
    • CDisable webfilter-force-off.
    • DChange protocol to TCP and port to 53.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCSS_NST_SE-7.4 practice, question 21. 71 questions available.