VCEdump

FCSS_NST_SE-7.4 FCSS - Network Security 7.4 Support Engineer

PDF question preview Back to product

Free preview

10 sample questions

The complete product contains 66 questions.

Question formats

Single choice5

Multiple choice5

Compare study plans

Fortinet · FCSS_NST_SE-7.4

FCSS_NST_SE-7.4 questions and answers

Review the question wording, option layout, and available explanations before choosing a study plan.

Question 1

Single choice

Refer to the exhibit, which shows a session entry.

Which statement about this session is true?

A
Return traffic to the initiator is sent to 10.1.0.1.
B
Return traffic to the initiator is sent lo 10.200.1.254.
C
It is an ICMP session from 10.1.10.10 to 10.200.1.1.
D
It is an ICMP session from 10.1.10.1 to 10.200.5.1.

Reveal answer details Close answer details

Correct answerD

Question 2

Multiple choice

Refer to the exhibit, which shows a truncated output of a real-time LDAP debug.

What two conclusions can you draw from the output? (Choose two.)

A
The name of the configured LDAP server is Lab.
B
The user is authenticating using CN=John Smith.
C
FortiOS is able to locate the user in step 3 (Bind Request) of the LDAP authentication process.
D
FortiOS is performing the second step (Search Request) in the LDAP authentication process.

Reveal answer details Close answer details

Correct answersB, D

Question 3

Single choice

Refer to the exhibit showing a debug output.

An administrator deployed FSSO in DC Agent Mode but FSSO is failing on FortiGate. Pinging FortiGate from where the collector agent is deployed is successful.

The administrator then produces the debug output shown in the exhibit.

What could be causing this error message?

A
The TCP port 445 is blocked between FortiGate and collector agent.
B
The collector agent preshared password is mismatched.
C
The FortiGate cannot resolve the active directory server name.
D
The FortiGate and the collector agent are using different TCP ports.

Reveal answer details Close answer details

Correct answerD

Question 4

Multiple choice

Which three common FortiGate-to-collector-agent connectivity issues can you identify using the FSSO real-time debug? (Choose three.)

A
Log is full on the collector agent.
B
Inability to reach IP address of the collector agent.
C
Refused connection. Potential mismatch of TCP port.
D
Mismatched pre-shared password.
E
Incompatible collector agent software version.

Reveal answer details Close answer details

Correct answersB, C, D

Question 5

Multiple choice

Refer to the exhibit, which shows the output of get router info bgp summary.

Which two statements are true? (Choose two.)

A
The local ForliGate has received one prefix from BGP neighbor 100.64.1.254.
B
The TCP connection with BGP neighbor 100.64.2.254 was successful.
C
The local FortiGate has received 18 packets from a BGP neighbor.
D
The local FortiGate is still calculating the prefixes received from BGP neighbor 100.64.2.264

Reveal answer details Close answer details

Correct answersA, C

Question 6

Single choice

In the SAML negotiation process, which section does the Identity Provider (IdP) provide the SAML attributes utilized in the authentication process to the Service Provider (SP)?

A
SP Login dump
B
Authentication Response
C
Authentication Request
D
Assertion dump

Reveal answer details Close answer details

Correct answerD

Question 7

Multiple choice

Refer to the exhibit, which shows the output ofa debug command.

Which two statements about the output are true? (Choose two.)

A
The interlace is part of the OSPF backbone area.
B
There are a total of five OSPF routers attached to the vorz4 network segment
C
One of the neighbors has a router ID of 0.0.0.4.
D
In the network connected to port4, two OSPF routers are down.

Reveal answer details Close answer details

Correct answersA, D

Question 8

Multiple choice

Refer to the exhibit.

Which three pieces of information does the diagnose sys top command provide? (Choose three.)

A
The miglogd daemon is running on CPU core ID 0.
B
The diagnose sys top command has been running for 18 minutes.
C
The miglogd daemon would be on top of the list, if the administrator pressed m on the keyboard.
D
The cmdbsvr process is occupying 2.4% of the total user memory space.
E
If the neweli daemon continues to be in the R state, it will need to be manually restarted.

Reveal answer details Close answer details

Correct answersA, C, D

Question 9

Single choice

Refer to the exhibit, which contains partial output from an IKE real-time debug.

The administrator does not have access to the remote gateway.

Based on the debug output, which configuration change the administrator make to the local gateway to resolve the phase 1 negotiation error?

A
In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.
B
In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.
C
In the phase 1 network configuration, set the IKE version to 2.
D
In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.

Reveal answer details Close answer details

Correct answerA

Question 10

Single choice

Refer to the exhibits.

An administrator Is expecting to receive advertised route 8.8.8.8/32 from FGT-A. On FGT- B, they confirm that the route is being advertised and received, however, the route is not being injected into the routing table.

What is the most likely cause of this issue?

A
A batter route to the 8.8.8.8/32 network exists in the routing table.
B
FGT-B is configured with a prefix list denying the 8.8.8.8/32 network to be injected into the routing table.
C
The administrator has misconfigured redistribution of routes on FGT-A.
D
FGT-8 is configured with a distribution list denying the 8.8.8.8/32 network to be injected into the routing table.

Reveal answer details Close answer details

Correct answerB