Fortinet FCSS_NST_SE-7.4 Exam Questions Instant Access

Question 1

Refer to the exhibit, which shows a session entry.

Which statement about this session is true?

AReturn traffic to the initiator is sent to 10.1.0.1.

BReturn traffic to the initiator is sent lo 10.200.1.254.

CIt is an ICMP session from 10.1.10.10 to 10.200.1.1.

DIt is an ICMP session from 10.1.10.1 to 10.200.5.1.

Answer : D

Question 2

Refer to the exhibit, which shows the partial output of a real-time OSPF debug.

Why are the two FortiGate devices unable to form an adjacency?

AThe Hello packet is being sent from an OSPF router with ID 0.0.0.112.

BThe two FortiGate devices attempting adjacency are in area 0.0.0.0.

COne FortiGate device is configured to require authentication, while the other is not.

DThe passwords on the FortiGate devices do not match.

Answer : C

Question 3

Refer to the exhibit, which shows a partial output from the get router info routing-table database command.

The administrator wants to configure a default static route for port3 and assign a distance of 50 and a priority of 0.

What will happen to the port1 and port2 default static routes after the port3 default static route is created?

AThe port2 default static route will be injected into the forwarding information base (FIB).

BThe port1 default static route will be injected into the FIB.

CNeither of the routes shown in the output will be injected into the FIB.

DBoth default static routes shown in the output will be injected into the FIB.

Answer : A

Question 4

Refer to the exhibit, which shows one way communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.

What three actions must you take to ensure successful communication? (Choose three.)

AYou must authorize the downstream FortiGate on the root FortiGate.

BFortiGate must not be in NAT mode.

CEnsure TCP port 8013 is not blocked along the way.

DYou must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.

EEnsure the port for Neighbor Discovery has been changed.

Answer : A, C, D

Question 5

Exhibit.

Refer to the exhibit, which contains partial output from an IKE real-time debug.

Which two statements about this debug output are correct? (Choose two.)

APerfect Forward Secrecy (PFS) is enabled in the configuration.

BThe local gateway IP address is 10.0.0.1.

CIt shows a phase 2 negotiation.

DThe initiator provided remote as its IPsec peer ID.

Answer : C, D

Question 6

Refer to the exhibit, which shows the partial output of a diagnose command.

Which two conclusions can you draw from the output shown in the exhibit? (Choose two.)

AFortiGate will drop the expected traffic if it does not arrive within 23 seconds.

BClearing the master session has no impact on the expectation session.

CThis is a pinhole session to allow traffic for a TCP protocol that dynamically assigns TCP ports.

DThe session is checked against firewall policy ID 25.

Answer : A, C

Question 7

Refer to the exhibits, which contain the partial configurations of two VPNs on FortiGate.

An administrator has configured two VPNs for two different user groups. Users who are in the Users-2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovers that FortiGate is not matching the user-2 VPN for members of the Users-2 group.

Which two changes must the administrator make to fix the issue? (Choose two.)

AChange to aggressive mode on both VPNs.

BEnable XAuth on both VPNs.

CUse different pre-shared keys on both VPNs.

DSet up specific peer IDs on both VPNs.

Answer : A, D

Fortinet FCSS - Network Security 7.4 Support Engineer FCSS_NST_SE-7.4 Exam Questions