FCSS_EFW_AD-7.6 practice questions 11–20

1. Question 11 · 66 in bank

   Refer to the exhibits.

   

   The system administrator settings configured on a root FortiGate and the Security Fabric settings configured on a downstream FortiGate are shown. When prompted to sign in with Security Fabric to the downstream FortiGate. a user enters the single sign-on (SSO) provider credentials. What happens next for the user?

   • AThe user is redirected to the root FortiGate.
   • BThe user accesses the downstream FortiGate with super_admin_readonly privileges.
   • CThe user accesses the root FortiGate with AdminSSO privileges.
   • DThe user receives an authentication failure message.

   Show answer

   Answer: B

   Next question

2. Question 12 · 66 in bank

   Refer to the exhibit.

   

   The ADVPN IPsec interface represents the VPN IPsec phase 1 from Hub A to Spoke 1 and Spoke 2, and from Hub В to Spoke 3 and Spoke 4. You must configure an ADVPN using IBGP and EBGP to connect Overlay 1 with Overlay 2. Which parameters must you configure in the phase 1 VPN IPsec configuration of the ADVPN tunnels?

   • Aset auto-discovery-forwarder enable and set remote-as x
   • Bset auto-discovery-crossover enable and set enforce-multihop enable
   • Cset auto-discovery-sender enable and set network-id x
   • Dset auto-discovery-receiver enable and set remote-ip x

   Show answer

   Answer: C

   Next question

3. Question 13 · 66 in bank

   Refer to the exhibit.

   

   You are deploying a hub and spokes network and using OSPF as a dynamic protocol. Which configuration is recommended for neighbor adjacency through the hub?

   • ASet virtual-link enable in the OSPF configuration
   • BSet rfc1583-compatible enable in the router configuration
   • CSet network-type point-to-multipoint in the hub interface
   • DSet route-reflector-client enable in the router configuration

   Show answer

   Answer: C

   Next question

4. Question 14 · 66 in bank

   Select 2

   Refer to the exhibit. The partial output of an OSPF command is shown.

   

   While checking the OSPF status of FortiGate. you receive the output shown in the exhibit. Based on the output, which two statements about FortiGate are correct? (Choose two.)

   • AFortiGate injects external routing information.
   • BFortiGate is a backup designated router.
   • CFortiGate is connected to multiple areas.
   • DFortiGate has OSPF ECMP enabled.

   Show answer

   Answer: CD

   Next question

5. Question 15 · 66 in bank

   Refer to the exhibit.

   

   A network diagram showing the corporate network and a new remote office network is shown. You must integrate the new remote office network with the corporate enterprise network. What must you do to allow routing between the two networks?

   • AImplement BGP to inject the new remote office network into the corporate FortiGate device.
   • BAdd the network 192.168.1.0/24 in the OSPF section on the corporate FortiGate device.
   • CImplement OSPF over IPsec on both FortiGate devices.
   • DConfigure virtual links on both FortiGate devices.

   Show answer

   Answer: C

   Next question

6. Question 16 · 66 in bank

   Select 2

   Refer to the exhibit.

   

   The packet capture output of a client hello message is shown. You are updating a firewall policy that includes SSL certificate inspection. You are capturing packets from the traffic passing through this firewall policy. Which two statements about the packet capture are correct? (Choose two.)

   • AYou can effectively apply an antivirus security profile to this traffic.
   • BYou can effectively apply a web filtering profile to this traffic.
   • CThe subject alternative name (SAN) is necessary to apply security profiles.
   • DThe client supports only TLS versions 1.2 and 1.3.

   Show answer

   Answer: BD

   Next question

7. Question 17 · 66 in bank

   Refer to the exhibit. The status of a new BGP configuration on FortiGate is shown.

   

   Based on the output shown in the exhibit, which configuration should you consider next?

   • AContact the remote peer administrator to enable BGP.
   • BConfigure a static route to 100.65.4.1.
   • CEnable ebgp-multipath.
   • DEnable ebgp-enforce-multihop.

   Show answer

   Answer: D

   Next question

8. Question 18 · 66 in bank

   Select 2

   Refer to the exhibits.

   

   The ADVPN network topology and partial BGP configuration are shown. Which two parameters must you configure in the config neighbor range for spokes shown in the exhibit? (Choose two.)

   • Aset prefix 10.0.12.0 255.255.255.0
   • Bset route-reflector-client enable
   • Cset neighbor-group advpn
   • Dset prefix 172.16.1.0 255.255.255.0

   Show answer

   Answer: CD

   Next question

9. Question 19 · 66 in bank

   Refer to the exhibit. A partial VPN configuration is shown.

   

   Which statement about this VPN IPsec phase 1 configuration is correct?

   • AFortiGate will not add a route to its routing information base (RIB) or forwarding information base (FIB) when the dynamic tunnel is negotiated.
   • BThis configuration must include certificates associated peer IDs to enhance security.
   • CA separate interface is created for each dial-up tunnel, which can be slower and more resource intensive, especially in large networks.
   • DThis configuration is the best for networks with regular traffic intervals, providing a balance between connectivity assurance and resource utilization.

   Show answer

   Answer: D

   Next question

10. Question 20 · 66 in bank

    Refer to the exhibit. A revision history window at the FortiManager device layer is shown.

    

    The IT team is trying to identify the administrator responsible for the most recent update to the FortiGate device database. What can the IT team conclude?

    • AThe user script_manager, an API user from the Fortinet Developer Network (FDN). is retrieving a configuration.
    • BThe retrieve process was automatically triggered by a Remote FortiGate Directly (via CLI) script.
    • CTo identify the user who created the event, in the FortiManager system logs, they must use the type=script filter in the user field.
    • DTo identify the user who created the event, they must view it on the Configuration and Installation widget on FortiGate at the FortiManager device layer.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCSS_EFW_AD-7.6 practice, question 11. 66 questions available.