Fortinet FCSS_NST_SE-7.4 Exam Practice Test Instant Access

Question 1

Which two statements about conserve mode are true? (Choose two.)

AFortiGate enters conserve mode when the system memory reaches the configured extreme threshold.

BFortiGate starts taking the configured action for new sessions requiring content inspection when the system memory reaches the configured red threshold.

CFortiGate exits conserve mode when the system memory goes below the configured green threshold.

DFortiGate starts dropping all new sessions when the system memory reaches the configured red threshold.

Answer : B, C

Question 2

Which statement about protocol options is true?

AProtocol options allow administrators to configure a maximum number of sessions for each configured protocol.

BProtocol options give administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols.

CProtocol options allow administrators to configure the Any setting for all enabled protocols, which provides the most efficient use of system resources.

DProtocol options allow administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on.

Answer : D

Question 3

Exhibit.

Refer to the exhibit, which shows two entries that were generated in the FSSO collector agent logs.

What three conclusions can you draw from these log entries? {Choose three.)

ARemote registry is not running on the workstation.

BThe user's status shows as 'not verified' in the collector agent.

CDNS resolution is unable to resolve the workstation name.

DThe FortiGate firmware version is not compatible with that of the collector agent.

EA firewall is blocking traffic to port 139 and 445.

Answer : A, B, E

Question 4

Refer to the exhibit, which shows the output of get router info ospf neighbor.

What can you conclude from the command output?

AThe network type connecting the local Fortigate and OSPF neighbor 0.0.0.10 is point-to-point.

BAll neighbors are in area 0.0.0.0.

CThe local FortiGate is the BDR.

DThe local FortiGate is not a DROther.

Answer : A

Question 5

Exhibit.

Refer to the exhibit, which shows the output of a session. Which two statements are true? (Choose Iwo.)

AThe TCP session has been successfully established.

BThe session was initiated from an authenticated user.

CThe session is being inspected using flow inspection.

DThe session is being offloaded.

Answer : A, B

Question 6

What are two reasons you might see iprope_in_check() check failed, drop when using the debug flow? (Choose two.)

APacket was dropped because of policy route misconfiguration.

BPacket was dropped because of traffic shaping.

CTrusted host list misconfiguration.

DVIP or IP pool misconfiguration.

Answer : C, D

Question 7

Refer to the exhibit, which shows partial outputs from two routing debug commands.

Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

ASet snat-route-change to enable.

BSet the priority of the static default route using port2 to 1.

CSet preserve-session-route to enable.

DSet the priority of the static default route using port1 to 10.

Answer : D

Fortinet FCSS_NST_SE-7.4 FCSS - Network Security 7.4 Support Engineer Exam Practice Test