Fortinet FCSS_NST_SE-7.4 Exam Practice Test Instant Access

Question 1

Refer to the exhibit, which contains partial output from an IKE real-time debug.

The administrator does not have access to the remote gateway.

Based on the debug output, which configuration change the administrator make to the local gateway to resolve the phase 1 negotiation error?

AIn the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.

BIn the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.

CIn the phase 1 network configuration, set the IKE version to 2.

DIn the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.

Answer : A

Question 2

Which statement about IKEv2 is true?

ABoth IKEv1 and IKEv2 share the feature of asymmetric authentication.

BIKEv1 and IKEv2 have enough of the header format in common that both versions can run over the same UDP port.

CIKEv1 and IKEv2 use same TCP port but run on different UDP ports.

DIKEv1 and IKEv2 share the concept of phase1 and phase2.

Answer : B

Question 3

Exhibit 1.

Exhibit 2.

Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network.

An administrator would like to lest session failover between the two service provider connections.

Which two changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)

AChange the priority of the port! static route to 11.

BChange the priority of the port2 static route to 5.

CConfigure unset snat-route-change to return it to the default setting.

DConfigure set snat-route-change enable.

Answer : A, D

Question 4

Refer to the exhibit, which shows a partial output of the fssod daemon real-time debug command.

What two conclusions can you draw Itom the output? (Choose two.)

AThe workstation with IP 10.124.2.90 will be polled frequently using TCP port 445 to see if the user is still logged on.

BThe logon event can be seen on the collector agent installed on Windows.

CFSSO is using DC agent mode to detect logon events.

DFSSO is using agentless polling mode to detect logon events.

Answer : A, D

Question 5

During which phase of IKEv2 does the Diffie-Helman key exchange take place?

AIKE_Req_INIT

BCreate_CHILD_SA

CIKE_Auth

DIKE_SA_INIT

Answer : D

Question 6

Exhibit.

Refer to the exhibit, which shows a FortiGate configuration.

An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however the web filter is not inspecting any traffic that is passing through the policy.

What must the administrator do to fix the issue?

ADisable webfilter-force-off.

BIncrease webfilter-timeout.

CEnable fortiguard-anycast.

DChange protocol to TCP.

Answer : A

Question 7

Refer to the exhibit, which shows a partial output of the real-time LDAP debug.

What two actions can the administrator take to resolve this issue? (Choose two.)

AEnsure the user logs in using 'John Smith' not 'jsmith'.

BEnsure the user is providing the correct user credentials.

CEnsure the user is a member of at least one AD group to ensure step 4 of the LDAP authentication process is successful.

DEnsure the account is active.

Answer : B, D

Fortinet FCSS - Network Security 7.4 Support Engineer FCSS_NST_SE-7.4 Exam Practice Test