FCSS_NST_SE-7.4 practice questions 41–50

1. Question 41 · 71 in bank

   Select 2

   Refer to the exhibit, which shows the partial output of diagnose sys session stat.

   

   An administrator has noticed unusual behavior from FortiGate. It appears that sessions are randomly removed. Which two reasons could explain this? (Choose two.)

   • AThe FortiGate is dropping all TCP sessions with incomplete three-way handshakes.
   • BThe FortiGate is deleting sessions because the kernel cannot allocate more memory pages.
   • CThe FortiGate is flushing sessions because of high memory usage.
   • DThe FortiGate is not accepting sessions because the device has been down 16 out of 120 seconds.

   Show answer

   Answer: BC

   Next question

2. Question 42 · 71 in bank

   Refer to the exhibit, which contains the output of the command diagnose vpn tunnel list.

   

   What is the status of the tunnel?

   • ABoth Phase 1 and Phase 2 were negotiated successfully.
   • BPhase 2 is down.
   • CTraffic is passing through the tunnel.
   • DPhase 1 is down.

   Show answer

   Answer: B

   Next question

3. Question 43 · 71 in bank

   Select 2

   Which actions does FortiGate take after an administrator enables the auxiliary session setting? (Choose two.)

   • AFortiGates creates a new auxiliary session for each packet it receives.
   • BFortiGate only offloads auxiliary sessions.
   • CFortiGate creates two sessions in case of a routing change.
   • DFortiGate accelerates all ECMP traffic to the NP6 processor.

   Show answer

   Answer: CD

   Next question

4. Question 44 · 71 in bank

   Refer to the exhibit, which contains a screenshot of some phase 1 settings.

   

   The VPN is up. To monitor traffic flow, the administrator enters the following CLI commands on an SSH session on FortiGate: diagnose sniffer packet any 'udp and port 500' 4 diagnose debug enable However, the sniffer does not show any output. Why?

   • AChange the filter to sniff protocol TCP.
   • BIt must sniff IP address 10.0.10.1.
   • CChange the filter to sniff traffic on port1.
   • DNAT Traversal is enabled.

   Show answer

   Answer: D

   Next question

5. Question 45 · 71 in bank

   Select 2

   Refer to the exhibit, which shows the output of a session.

   

   Which two statements are correct? (Choose two.)

   • AThe session is being offloaded.
   • BThe session is being inspected using flow inspection.
   • CThe TCP session has been successfully established.
   • DThe session was initiated from an authenticated user.

   Show answer

   Answer: CD

   Next question

6. Question 46 · 71 in bank

   Refer to the exhibit, which shows a session table entry.

   

   Which statement about FortiGate behavior relating to this session is correct?

   • AFortiGate redirected the client to the captive portal to authenticate, so that a correct policy match could be made.
   • BFortiGate forwarded this session without any inspection.
   • CFortiGate is performing a security profile inspection using the CPU.
   • DFortiGate applied only IPS inspection to this session.

   Show answer

   Answer: C

   Next question

7. Question 47 · 71 in bank

   Refer to the exhibit showing a debug output.

   

   An administrator deployed FSSO in DC Agent Mode but FSSO is failing on FortiGate. Pinging FortiGate from where the collector agent is deployed is successful. The administrator then produces the debug output shown in the exhibit. What could be causing this error message?

   • AThe TCP port 445 is blocked between FortiGate and collector agent.
   • BThe collector agent preshared password is mismatched.
   • CThe FortiGate cannot resolve the active directory server name.
   • DThe FortiGate and the collector agent are using different TCP ports.

   Show answer

   Answer: D

   Next question

8. Question 48 · 71 in bank

   Select 2

   Refer to the exhibit, which shows a partial output of the real-time LDAP debug.

   

   What two actions can the administrator take to resolve this issue? (Choose two.)

   • AEnsure the user logs in using 'John Smith' not 'jsmith'.
   • BEnsure the user is providing the correct user credentials.
   • CEnsure the user is a member of at least one AD group to ensure step 4 of the LDAP authentication process is successful.
   • DEnsure the account is active.

   Show answer

   Answer: BD

   Next question

9. Question 49 · 71 in bank

   Select 2

   Refer to the exhibit, which shows the output of get system ha status.

   

   NGFW-1 and NGFW-2 have been up for a week. Which two statements about the output are correct? (Choose two.)

   • AIf port7 becomes disconnected on the secondary, both FortiGate devices will elect itself as primary.
   • BIf FGVM...649 is rebooted, FGVM...650 will become the primary and retain that role, even after FGVM...649 rejoins the cluster.
   • CIf no action is taken, the primary FortiGate will leave the cluster because of the current sync status.
   • DIf a configuration change is made to the primary FortiGate at this time, the secondary will initiate a synchronization reset.

   Show answer

   Answer: AB

   Next question

10. Question 50 · 71 in bank

    Select 2

    Which two statements about Security Fabric communications are true? (Choose two.)

    • AFortiTelemetry and Neighbor Discovery both operate using TCP.
    • BThe default port for Neighbor Discovery can be modified.
    • CBy default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.
    • DFortiTelemetry must be manually enabled on the FortiGate interface.

    Show answer

    Answer: CD

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCSS_NST_SE-7.4 practice, question 41. 71 questions available.