FCSS - Network Security 7.4 Support Engineer

Here you have the best Fortinet FCSS_NST_SE-7.4 practice exam questions

Question 1 of 33

Refer to the exhibit, which shows the port1 interface configuration on FortiGate and partial session information for ICMP traffic.

What happens to the session information if a routing change occurs that affects this session?

Only the interface and gateway information for dev=7 will be removed.

The session information will not change unless the current route has been removed from the routing table.

The session will be flagged as dirty but no route lookups will be performed.

Sessions involving port7 or port19 will not have their routing information flushed.

Correct Answer: B

Question 2 of 33

Refer to the exhibit, which shows the modified output of the routing kernel.

Which statement is true?

The egress interface associated with static route 8.8.8.8/32 is administratively up.

The default static route through 10.200.1.254 is not in the forwarding information base.

The default static route through port2 is in the forwarding information base.

The BGP route to 10.0.4.0/24 is not in the forwarding information base.

Correct Answer: D

Question 3 of 33

Refer to the exhibit.

The exhibit shows the output from using the command diagnose debug application samld -1 to diagnose a SAML connection.

Based on this output, what can you conclude?

Active Directory is used for authentication.

The authentication request is for an SSL VPN connection.

The IdP IP address is 10.1.10.254.

The IdP IP address is 10.1.10.2.

Correct Answer: D

Question 4 of 33

Refer to the exhibit, which shows the output of the command get router info bgp neighbors 100.64.2.254 advertised-routes.

What can you conclude from the output?

The BGP state of the two BGP participants is OpenConfirm.

The router ID of the neighbor is 100.64.2.254.

The BGP neighbor is advertising the 10.20.30.40/24 network to the local router.

The local router is advertising the 10.20.30.40/24 network to its BGP neighbor.

Correct Answer: D

Question 5 of 33

Refer to the exhibit, which shows the partial output of a real-time OSPF debug.

Why are the two FortiGate devices unable to form an adjacency?

The Hello packet is being sent from an OSPF router with ID 0.0.0.112.

The two FortiGate devices attempting adjacency are in area 0.0.0.0.

One FortiGate device is configured to require authentication, while the other is not.

The passwords on the FortiGate devices do not match.

Correct Answer: C