FCSS_NST_SE-7.6 practice questions 1–10

1. Question 1 · 57 in bank

   Select 2

   The local OSPF router is unable to establish adjacency with a peer. Which two things should the administrator do to troubleshoot the issue? (Choose two.)

   • ACheck if there is an active static route to the peer.
   • BCheck if both peers have an IP address within the same subnet.
   • CCheck if TCP port 179 is blocked.
   • DCheck if IP protocol 89 is blocked.

   Show answer

   Answer: BD

   Next question

2. Question 2 · 57 in bank

   Refer to the exhibit. The partial output of diagnose sys session stat command is shown.

   

   Which statement about the output shown in the exhibit is correct?

   • A27 sessions have expired but are still in the session table in case any out-of-order packets arrive.
   • B562 TCP sessions have their proto_state set to 01 if there is no inspection.
   • CThere have been 131072 recorded ephemeral sessions but there are no current ones.
   • D113 sessions have been dropped because of memory page exhaustion.

   Show answer

   Answer: B

   Next question

3. Question 3 · 57 in bank

   Refer to the exhibit. Partial output of FortiOS kernel slabs

   

   The partial output of FortiOS kernel slabs is shown. Which statement about total slab size is true?

   • AThe total slab size of the ip6_session slab is 1472 kB and is associated with the kernel.
   • BThe total slab size of the ip_session slab is 14080 kB and is associated with the user space.
   • CThe total slab size of the UDPv6 slab is 14080 kB and is associated with the user space.
   • DThe total slab size of the tcp_session slab is 7500 kB and is associated with the kernel.

   Show answer

   Answer: D

   Next question

4. Question 4 · 57 in bank

   Select 2

   Refer to the exhibit. Partial output of the real-time LDAP debug is shown.

   

   Which two actions can the administrator take to resolve this issue? (Choose two.)

   • AEnsure the account is active.
   • BEnsure the user is providing the correct user credentials.
   • CEnsure the user is a member of at least one AD group to ensure that step 4 of the LDAP authentication process is successful.
   • DEnsure the user logs in using ‘John Smith’ not ‘jsmith’.

   Show answer

   Answer: AB

   Next question

5. Question 5 · 57 in bank

   Select 2

   Refer to the exhibit. The output from using the command diagnose debug application samld -1 to diagnose a SAML connection is shown. Diagnose output -

   

   Based on this output, which two conclusions can you draw? (Choose two.)

   • AThe SP IP address is 10.1.10.2.
   • BThe IdP IP address is 10.1.10.2.
   • CThe IdP IP address is 10.1.10.254.
   • DThe SP IP address is 10.1.10.254.

   Show answer

   Answer: BD

   Next question

6. Question 6 · 57 in bank

   Select 2

   A VPN tunnel is up. To monitor traffic flow, the administrator enters the following CLI commands on an SSH session on FortiGate: # diagnose debug enable # diagnose sniffer packet any ’udp and port 500’ 4 However, the sniffer does not show any output. Assuming default configuration values, what are two possible reasons there is no output? (Choose two.)

   • AThe sniffer output will be ignored because running diagnose debug enable shows only application real-time debugs.
   • BNAT Traversal is enabled.
   • CThe sniffer must be restricted to the remote peer IP address.
   • DThe filter should be modified to also capture packets for TCP port 443 or TCP port 4500.

   Show answer

   Answer: BD

   Next question

7. Question 7 · 57 in bank

   Select 2

   Refer to the exhibit. The sniffer log on two FortiGate devices are shown.

   

   Based on the information in the log, which two factors explain the output on FortiGate FGT-02?

   • AThe administrator configured the wrong remote peer IP address on FGT-01.
   • BThe administrator set the wrong sniffer filter on FGT-02.
   • CThe administrator has not yet configured the VPN tunnel on FGT-02.
   • DA third-party device is blocking protocol 50.

   Show answer

   Answer: AD

   Next question

8. Question 8 · 57 in bank

   Select 2

   Refer to the exhibit. High Availability configuration status

   

   Which two statements about the output are true considering NGFW-1 and NGFW-2 have been up for a week? (Choose two.)

   • AIf a configuration change is made to the secondary FortiGate, the Configuration Status will not change.
   • BIf a configuration change is made to the primary FortiGate at this time, the secondary will initiate a synchronization reset.
   • CIf FGVM...649 is rebooted, FGVM...650 will become the primary FortiGate and retain that role, even after FGVM...649 rejoins the cluster.
   • DIf port7 becomes disconnected on the secondary FortiGate, both FortiGate devices will elect themselves as primary.

   Show answer

   Answer: CD

   Next question

9. Question 9 · 57 in bank

   Select 2

   What are two functions of automation stitches? (Choose two.)

   • AYou can configure automation stitches to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.
   • BYou can configure automation stitches to insert a delay between actions if the automation stiches are set to execute actions in parallel.
   • CYou can configure automation stitches to modify packet headers and payloads if specific traffic triggers an anomaly IPS event.
   • DYou can configure automation stitches to take parameters from previous actions as input for the next action if the automation stitches are set to execute actions in sequence.

   Show answer

   Answer: AD

   Next question

10. Question 10 · 57 in bank

    Select 3

    Refer to the exhibit. Two entries that were generated in the FSSO collector agent log is shown.

    

    Which three conclusions can you draw from these log entries? (Choose three.)

    • ARemote registry is not running on the workstation.
    • BThe user’s status shows as “not verified” in the collector agent.
    • CDNS resolution is unable to resolve the workstation name.
    • DA firewall is blocking traffic to port 139 and 445.
    • EThe logged on user is part of a group that is not configured in the group filter.

    Show answer

    Answer: ABD

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCSS_NST_SE-7.6 practice, question 1. 57 questions available.