FCSS_NST_SE-7.4 practice questions 61–70

1. Question 61 · 71 in bank

   Refer to the exhibit, which shows output from a collector agent log.

   

   The collector agent is showing the status of a workstation as "Not Verified". What is a common cause for this message?

   • AThe workstation has come out of hibernate mode.
   • BThe collector agent is crashing.
   • CTraffic to port 139 and 445 is blocked.
   • DDNS cannot resolve the workstation name.

   Show answer

   Answer: C

   Next question

2. Question 62 · 71 in bank

   Refer to the exhibit, which contains the output of a debug command.

   

   If the default settings are in place, what can you conclude about the conserve mode shown in the exhibit?

   • AFortiGate is currently allowing new sessions that require flow-based content inspection and blocking sessions that require proxy-based content inspection.
   • BFortiGate is currently allowing new sessions that require flow-based or proxy-based content inspection but is not performing inspection on those sessions.
   • CFortiGate is currently blocking all new sessions regardless of the content inspection requirements or configuration settings because of high memory use.
   • DFortiGate is currently allowing new sessions that require flow-based or proxy-based content inspection and is performing inspection on those sessions.

   Show answer

   Answer: B

   Next question

3. Question 63 · 71 in bank

   Refer to the exhibit, which shows the output of a debug command.

   

   What needs to happen for the local router to be elected DR?

   • AThe local router will be elected DR only if re-election occurs and its router ID is highest, assuming equal priority.
   • BThe local router will be elected DR if the current DR fails because it has a higher router ID than the BDR.
   • CThe local router will never be elected DR.
   • DBoth the DR and BDR will have to fail before the local router will be elected DR.

   Show answer

   Answer: D

   Next question

4. Question 64 · 71 in bank

   Select 2

   Refer to the exhibit, which shows the partial output of a session table entry.

   

   Which two statements are true? (Choose two.)

   • AThe traffic has been tagged for VLAN 0000.
   • BNP7 is handling offloading of this session.
   • CThe session has been offloaded.
   • DThe traffic matches Policy ID 1.

   Show answer

   Answer: CD

   Next question

5. Question 65 · 71 in bank

   Refer to the exhibit, which shows partial outputs from two routing debug commands.

   

   Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

   • ASet the priority of the static default route using port1 to 10.
   • BSet snat-route-change to enable.
   • CSet preserve-session-route to enable.
   • DSet the priority of the static default route using port2 to 1.

   Show answer

   Answer: A

   Next question

6. Question 66 · 71 in bank

   Refer to the exhibit, which shows the output of a BGP debug command.

   

   What is the reason that the local FortiGate is not receiving any prefixes from its neighbors?

   • AThe RIB-OUT configuration for router 10.127.0.75 prevents any route advertisement to the local router.
   • BThe router 100.64.3.1 needs to update the local AS number to 65060 to become adjacent with the local router.
   • CThe local router is waiting for the keepalive message from the router 10.125.0.60.
   • DNone of the three neighbors have successfully established the TCP three-way handshake with the local router.

   Show answer

   Answer: A

   Next question

7. Question 67 · 71 in bank

   Select 2

   Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.

   

   Based on the output, which two statements are correct? (Choose two.)

   • AThe npu_flag for this tunnel is 02.
   • BThe npu_flag for this tunnel is 03.
   • CDifferent SPI values are a result of auto-negotiation being disabled for phase 2 selectors.
   • DAnti-replay is enabled.

   Show answer

   Answer: BD

   Next question

8. Question 68 · 71 in bank

   Select 2

   Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network.

   

   

   An administrator would like to test session failover between the two service provider connections. Which two changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)

   • AConfigure set snat-route-change enable.
   • BChange the priority of the port1 static route to 11.
   • CConfigure unset snap-route-change to return it to the default setting.
   • DChange the priority of the port2 static route to 5.

   Show answer

   Answer: AB

   Next question

9. Question 69 · 71 in bank

   Select 2

   Refer to the exhibit, which shows the output of the BGP database.

   

   Which two statements are correct? (Choose two.)

   • AThe output shows all prefixes advertised by all neighbors as well as the local router.
   • BThe advertised prefix of 10.20.30.0/24 was configured using the network command.
   • CThe advertised prefix of 10.20.30.0/24 is being advertised through the redistribution of another routing protocol.
   • DThe first prefixes are being advertised using a legacy route advertisement.

   Show answer

   Answer: AB

   Next question

10. Question 70 · 71 in bank

    Refer to the exhibit, which shows a session entry.

    

    Which statement about this TCP session is true?

    • AReturn traffic to the initiator is sent to 10.9.31.117.
    • BIt is a TCP session from 10.9.31.11 to 200.8.57.5.
    • CIt is a TCP session from 10.9.31.117 to 10.1.0.3.
    • DReturn traffic to the initiator is sent to 10.1.0.254.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCSS_NST_SE-7.4 practice, question 61. 71 questions available.