Fortinet FCSS_NST_SE-7.4 Exam Practice Test Instant Access

Question 1

Refer to the exhibit, which shows a truncated output of a real-time LDAP debug.

What two conclusions can you draw from the output? (Choose two.)

AThe name of the configured LDAP server is Lab.

BThe user is authenticating using CN=John Smith.

CFortiOS is able to locate the user in step 3 (Bind Request) of the LDAP authentication process.

DFortiOS is performing the second step (Search Request) in the LDAP authentication process.

Answer : B, D

Question 2

Refer to the exhibit, which shows a partial web filter profile configuration.

The URL www.dropbox.com is categorized as File Sharing and Storage.

Which action does FortiGate take if a user attempts to access www.dropbox.com?

AFortiGate blocks the connection as an invalid URL.

BBased on the URL Filter configuration, FortiGate allows the connection.

CFortiGate blocks the connection, based on the FortiGuard category-based filter configuration.

DBased on the Web Content filter configuration, access to www.dropbox.com would be exempted.

Answer : B

Question 3

Refer to the exhibit, which shows a partial output of the fssod daemon real-time debug command.

What two conclusions can you draw Itom the output? (Choose two.)

AThe workstation with IP 10.124.2.90 will be polled frequently using TCP port 445 to see if the user is still logged on.

BThe logon event can be seen on the collector agent installed on Windows.

CFSSO is using DC agent mode to detect logon events.

DFSSO is using agentless polling mode to detect logon events.

Answer : A, D

Question 4

Exhibit.

Refer to the exhibit, which shows the output of a diagnose command.

What can you conclude about the debug output in this scenario?

AThe first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.

BThere is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.

CFortiGate used 64.26.151.37 as the initial server to validate its contract.

DServers with a negative TZ value are less preferred for rating requests.

Answer : B

Question 5

Exhibit.

Refer to the exhibit, which shows a FortiGate configuration.

An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however the web filter is not inspecting any traffic that is passing through the policy.

What must the administrator do to fix the issue?

ADisable webfilter-force-off.

BIncrease webfilter-timeout.

CEnable fortiguard-anycast.

DChange protocol to TCP.

Answer : A

Question 6

Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate.

Which action will FortiGate take when using the default settings for SSL certificate inspection?

AFortiGate uses the SNI from the user's web browser.

BFortiGate closes the connection because this represents an invalid SSL/TLS configuration.

CFortiGate uses the first entry listed in the SAN field in the server certificate.

DFortiGate uses the CN information from the Subject field in the server certificate.

Answer : D

Question 7

Refer to the exhibit, which shows a partial output from the get router info routing-table database command.

The administrator wants to configure a default static route for port3 and assign a distance of 50 and a priority of 0.

What will happen to the port1 and port2 default static routes after the port3 default static route is created?

AThe port2 default static route will be injected into the forwarding information base (FIB).

BThe port1 default static route will be injected into the FIB.

CNeither of the routes shown in the output will be injected into the FIB.

DBoth default static routes shown in the output will be injected into the FIB.

Answer : A

Fortinet FCSS_NST_SE-7.4 FCSS - Network Security 7.4 Support Engineer Exam Practice Test