FCSS_NST_SE-7.6 practice questions 31–40

1. Question 31 · 57 in bank

   Select 2

   Refer to the exhibit. Debug output -

   

   A partial output from an IKE real-time debug is shown. The administrator does not have access to the remote gateway. Based on the debug output, which two conclusions can you draw? (Choose two.)

   • AThere is a Diffie-Hellman group mismatch.
   • BThis is a phase1 negotiation.
   • CThe remote peer is the initiating peer.
   • DThis is a phase2 negotiation.

   Show answer

   Answer: BC

   Next question

2. Question 32 · 57 in bank

   Refer to the exhibit. Diagnose output -

   

   Partial output of command diagnose debug rating command is shown. Which FDS server will the FortiGate algorithm choose?

   • A64.26.151.37
   • B209.22.147.36
   • C96.45.33.65
   • D208.91.112.194

   Show answer

   Answer: A

   Next question

3. Question 33 · 57 in bank

   Select 2

   Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which two actions will FortiGate take when using the default settings for SSL certificate inspection? (Choose two.)

   • AFortiGate uses the SNI from the user’s web browser.
   • BFortiGate does not decrypt the traffic if the traffic is blocked by the web filter profile.
   • CFortiGate uses the CN information from the Subject field in the server certificate.
   • DFortiGate does not decrypt the traffic if the traffic is allowed by the web filter profile.

   Show answer

   Answer: AC

   Next question

4. Question 34 · 57 in bank

   Select 2

   Refer to the exhibit. Partial output of a real-time LDAP debug is shown.

   

   Which two conclusions can you draw from the output? (Choose two.)

   • AFortiOS performs a bind to the LDAP server using the user’s credentials.
   • BFortiOS is performing the second step (Search Request) in the LDAP authentication process.
   • CThe user was found in the LDAP tree whose root is TAC.ottawa.fortinet.com.
   • DFortiOS collects the user group information.

   Show answer

   Answer: BC

   Next question

5. Question 35 · 57 in bank

   Select 2

   Refer to the exhibit.

   

   The port1 interface configuration on FortiGate and partial session information for ICMP traffic are shown. Which two things happen to the session information if a routing change occurs that affects this session? (Choose two.)

   • AThe session information will not change even when the active route has been removed from the routing table.
   • BThe session information will not change unless the current route has been removed from the routing table.
   • CThe session will be flagged as dirty but no route lookups will be performed.
   • DThis session will be unaffected by routing changes. The routing changes will apply only to new sessions.

   Show answer

   Answer: BD

   Next question

6. Question 36 · 57 in bank

   Select 2

   Refer to the exhibit.

   

   The exhibit shows the output of a session. Which two statements are correct? (Choose two.)

   • AThe session was initiated from an authenticated user.
   • BThe TCP session has been successfully established.
   • CThe gateway to the destination is 10.1.10.1.
   • DThe session did not match a firewall policy.

   Show answer

   Answer: AB

   Next question

7. Question 37 · 57 in bank

   Refer to the exhibit.

   

   The exhibit shows a session entry. Which statement about this TCP session is true?

   • AThe session will expire in one second.
   • BThe session is offloaded using NP7.
   • CReturn traffic to the initiator is sent to 10.9.31.117.
   • DIt is a TCP session from 10.9.31.117 to 10.1.0.3.

   Show answer

   Answer: C

   Next question

8. Question 38 · 57 in bank

   Refer to the exhibit.

   

   Which route will traffic take to get to the 100.65.0.0/24 network considering the routes are all configured with the same distance?

   • AThe static route
   • BThe OSPF route
   • CThe policy route
   • DThe BGP route

   Show answer

   Answer: C

   Next question

9. Question 39 · 57 in bank

   Select 2

   Refer to the exhibit.

   

   Which two observations can you make about the web filter traffic captured using the flow tool? (Choose two.)

   • AThe web filter profile is configured with proxy-based inspection mode.
   • BThe HTTPS port is mapped to 443 in the SSL/SSH Inspection Profile.
   • CThe firewall policy is configured with proxy-based inspection mode.
   • DThe session is offloaded to the NPU.

   Show answer

   Answer: BC

   Next question

10. Question 40 · 57 in bank

    Select 2

    Which two troubleshooting steps should you perform if you encounter issues with intermittent web filter behavior? (Choose two.)

    • ACheck that the correct port is mapped to HTTP in the Protocol Options.
    • BCheck that the communication between FortiGate and FortiGuard is stable.
    • CCheck that the inspection mode configured for the web filter profile matches that of the firewall policy where it is applied.
    • DCheck that FortiGate is not entering conserve mode.

    Show answer

    Answer: BD

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCSS_NST_SE-7.6 practice, question 31. 57 questions available.