FCSS_NST_SE-7.4 by Fortinet Actual Free Exam Questions And Answers

Question 1

View the exhibit:

Given the output showing a real-time debug, which statement describes why the update is failing?

A. FortiGate is unable to establish a TCP connection with FDS.

B. The administrator should use the execute update-wf command instead.

C. FortiGate is unable to resolve the required FQDN (service.fortiguard.net) for antivirus and IPS updates.

D. The update should be using port 53 or port 8888, instead of port 443.

Discussion 0

Correct Answer: A Vote an answer

Question 2

Which three common FortiGate-to-collector-agent connectivity issues can you identify using the FSSO real-time debug? (Choose three.)

A. Refused connection. Potential mismatch of TCP port.

B. Log is full on the collector agent.

C. Incompatible collector agent software version.

D. Mismatched pre-shared password.

E. Inability to reach IP address of the collector agent.

Discussion 0

Correct Answer: A,D,E Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit, which shows the output of a policy route table entry.

Which type of policy route does the output show?

A. A regular policy route

B. An ISDB route

C. An SD-WAN rule

D. A regular policy route, which is associated with an active static route in the FIB

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

Which two statements are true regarding heartbeat messages sent from an FSSO collector agent to FortiGate? (Choose two.)

A. The heartbeat messages can be seen in the collector agent logs.

B. The heartbeat messages can be seen using the command diagnose debug authd fsso list.

C. The heartbeat messages must be manually enabled on FortiGate.

D. The heartbeat messages can be seen on FortiGate using the real-lime FSSO debug.

Discussion 0

Correct Answer: A,D Vote an answer

Question 5

Refer to the exhibit, which contains a screenshot of some phase 1 settings. The VPN is not up.
To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

However, the IKE real-time debug does not show any output. Why?

A. The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.

B. The administrator must also run the command diagnose debug enable.

C. The log-filter setting is incorrect. The VPN traffic does not match this filter.

D. Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.

Discussion 0

Correct Answer: B Vote an answer

Question 6

Refer to the exhibit, which shows one way communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.

What three actions must you take to ensure successful communication? (Choose three.)

A. You must authorize the downstream FortiGate on the root FortiGate.

B. FortiGate must not be in NAT mode.

C. You must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.

D. Ensure TCP port 8013 is not blocked along the way.

E. Ensure the port for Neighbor Discovery has been changed.

Discussion 0

Correct Answer: A,C,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Fortinet FCSS - Network Security 7.4 Support Engineer - FCSS_NST_SE-7.4 Exam Practice Test

Contact Us

Useful Links

Latest Updated