Fortinet FCSS_NST_SE-7.4 Exam Questions Instant Access

Question 1

Refer to the exhibit, which shows the partial output of a diagnose command.

Which two conclusions can you draw from the output shown in the exhibit? (Choose two.)

AFortiGate will drop the expected traffic if it does not arrive within 23 seconds.

BClearing the master session has no impact on the expectation session.

CThis is a pinhole session to allow traffic for a TCP protocol that dynamically assigns TCP ports.

DThe session is checked against firewall policy ID 25.

Answer : A, C

Question 2

Refer to the exhibit, which shows the partial output of FortiOS kernel slabs.

Which statement is true?

AThe total slab size of the sctp_session slab is 0 kB and is associated with the user space.

BThe total slab size of the ip_session slab is 3600 kB and is associated with the user space.

CThe total slab size of the ip6_session slab is 1300 kB and is associated with the kernel.

DThe total slab size of the tcp_session slab is 7500 kB and is associated with the kernel.

Answer : D

Question 3

Refer to the exhibit, which shows a partial output of the real-time LDAP debug.

What two actions can the administrator take to resolve this issue? (Choose two.)

AEnsure the user logs in using 'John Smith' not 'jsmith'.

BEnsure the user is providing the correct user credentials.

CEnsure the user is a member of at least one AD group to ensure step 4 of the LDAP authentication process is successful.

DEnsure the account is active.

Answer : B, D

Question 4

Exhibit.

Refer to the exhibit, which contains partial output from an IKE real-time debug.

Which two statements about this debug output are correct? (Choose two.)

APerfect Forward Secrecy (PFS) is enabled in the configuration.

BThe local gateway IP address is 10.0.0.1.

CIt shows a phase 2 negotiation.

DThe initiator provided remote as its IPsec peer ID.

Answer : C, D

Question 5

Refer to the exhibit, which shows the partial output of a real-time OSPF debug.

Why are the two FortiGate devices unable to form an adjacency?

AThe Hello packet is being sent from an OSPF router with ID 0.0.0.112.

BThe two FortiGate devices attempting adjacency are in area 0.0.0.0.

COne FortiGate device is configured to require authentication, while the other is not.

DThe passwords on the FortiGate devices do not match.

Answer : C

Question 6

Refer to the exhibit, which contains partial output from an IKE real-time debug.

The administrator does not have access to the remote gateway.

Based on the debug output, which configuration change the administrator make to the local gateway to resolve the phase 1 negotiation error?

AIn the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.

BIn the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.

CIn the phase 1 network configuration, set the IKE version to 2.

DIn the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.

Answer : A

Question 7

Refer to the exhibit, which shows one way communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.

What three actions must you take to ensure successful communication? (Choose three.)

AYou must authorize the downstream FortiGate on the root FortiGate.

BFortiGate must not be in NAT mode.

CEnsure TCP port 8013 is not blocked along the way.

DYou must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.

EEnsure the port for Neighbor Discovery has been changed.

Answer : A, C, D

Fortinet FCSS - Network Security 7.4 Support Engineer FCSS_NST_SE-7.4 Exam Questions