FCSS - Network Security 7.4 Support Engineer (FCSS_NST_SE-7.4) Free Practice Test

Question 1

Refer to the exhibit, which shows a FortiGate configuration. An administrator is troubleshooting a web filter issue on FortiGate.
The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator do to fix the issue?

A. Disable webfilter-force-off.

B. Disable webfilter-force-offat the VDOM level.

C. Set sdns-server-ipto service.fortiguard.net.

D. Change protocolto TCP and port to 53.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Refer to the exhibits. An administrator Is expecting to receive advertised route 8.8.8.8/32 from FGT-A. On FGT-B, they confirm that the route is being advertised and received, however, the route is not being injected into the routing table. What is the most likely cause of this issue?

A. FGT-8 is configured with a distribution list denying the 8.8.8.8/32 network to be injected into the routing table.

B. FGT-B is configured with a prefix list denying the 8.8.8.8/32 network to be injected into the routing table.

C. The administrator has misconfigured redistribution of routes on FGT-A.

D. A batter route to the 8.8.8.8/32 network exists in the routing table.

Correct Answer: B

Question 3

Refer to the exhibit, which shows the output of get router info ospf neighbor.

What can you conclude from the command output?

A. All neighbors are in area 0.0.0.0.

B. The network type connecting the local Fortigate and OSPF neighbor 0.0.0.10 is point-to-point.

C. The local FortiGate is not a DROther.

D. The local FortiGate is the BDR.

Correct Answer: B

Question 4

Refer to the exhibit, which contains partial output from an IKE real-time debug.

The administrator does not have access to the remote gateway. Based on the debug output, which configuration change the administrator make to the local gateway to resolve the phase 1 negotiation error?

A. In the phase 1 network configuration, set the IKE version to 2.

B. In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.

C. In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.

D. In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Refer to the exhibit, which shows the partial output of FortiOS kernel slabs.

Which statement is true?

A. The total slab size of the tcp_session slab is 7500 kB and is associated with the kernel.

B. The total slab size of the sctp_session slab is 0 kB and is associated with the user space.

C. The total slab size of the ip_session slab is 3600 kB and is associated with the user space.

D. The total slab size of the ip6_session slab is 1300 kB and is associated with the kernel.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Refer to the exhibit, which shows the output of a debug command.

Which two statements about the output are true? (Choose two.)

A. One of the neighbors has a router ID of 0.0.0.4.

B. In the network connected to port4, two OSPF routers are down.

C. There are a total of five OSPF routers attached to the vorz4 network segment

D. The interlace is part of the OSPF backbone area.

Correct Answer: B,D

Question 7

Which three conditions would prevent a static route from being used by the kernel to route traffic?
(Choose three.)

A. The interface specified in the route configuration is down.

B. The next-hop IP address is unreachable and health monitor is configured.

C. There is another route to the same destination, with a higher distance.

D. There is another route to the same destination, with a lower distance.

E. The route has a lower metric than another route to the same destination.

Correct Answer: A,B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Refer to the exhibit, which shows a session table entry.

Which statement about FortiGate behavior relating to this session is correct?

A. FortiGate applied only IPS inspection to this session.

B. FortiGate forwarded this session without any inspection.

C. FortiGate is performing a security profile inspection using the CPU.

D. FortiGate redirected the client to the captive portal to authenticate, so that a correct policy match could be made.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Refer to the exhibit, which shows the output of a BGP debug command.

What can you conclude about the router in this scenario?

A. All of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4.

B. The BGP session with peer 10.127.0.75 is up.

C. The router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the 8GP session with the local router.

D. An inbound route-map on local router is blocking the prefixes from neighbor 100.64.3.1.

Correct Answer: B

Question 10

Refer to the exhibit, which shows the output of the get router info bgp summary command.

Which statement regarding adjacencies between the local router and its neighbors is correct?

A. The local router and neighbor 100.64.2.254are unable to establish adjacency because AS 100 is already used by neighbor 100.64.1.254.

B. The local router and neighbor 100.64.1.254established adjacency because their BGP table versions are identical.

C. The local router and neighbor 100.64.2.254are unable to establish adjacency because the TCP session could not be established.

D. The local router and neighbor 100.64.2.254are unable to establish adjacency because their BGP table versions are different.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet FCSS - Network Security 7.4 Support Engineer (FCSS_NST_SE-7.4) Free Practice Test