Fortinet FCSS_NST_SE-7.6 Practice Questions & Answers

Question 6 of 27

Refer to the exhibit.
Partial output of FortiOS kernel slabs
Exam FCSS_NST_SE-7.6: Image 1

The partial output of FortiOS kernel slabs is shown.
Which statement about total slab size is true?

A.

The total slab size of the ip6_session slab is 1472 kB and is associated with the kernel.

B.

The total slab size of the ip_session slab is 14080 kB and is associated with the user space.

C.

The total slab size of the UDPv6 slab is 14080 kB and is associated with the user space.

D.

The total slab size of the tcp_session slab is 7500 kB and is associated with the kernel.

Question 7 of 27

Refer to the exhibit.
The partial output of diagnose sys session stat command is shown.
Exam FCSS_NST_SE-7.6: Image 1

Which statement about the output shown in the exhibit is correct?

A.

27 sessions have expired but are still in the session table in case any out-of-order packets arrive.

B.

562 TCP sessions have their proto_state set to 01 if there is no inspection.

C.

There have been 131072 recorded ephemeral sessions but there are no current ones.

D.

113 sessions have been dropped because of memory page exhaustion.

Question 8 of 27

Refer to the exhibit.
The output of a BGP debug command is shown.
Exam FCSS_NST_SE-7.6: Image 1

Why has the local router at 172.16.23.58 been unable to establish adjacency with its only neighbor?

A.

The local router has not received an OPEN message from the neighbor.

B.

There is no active route to the BGP neighbor.

C.

The neighbor router has become unreachable, which is evident by the low ratio of messages received to messages sent.

D.

The local router has not received a SYN/ACK packet from the neighbor.

Question 9 of 27

Refer to the exhibit.

Debug output -
Exam FCSS_NST_SE-7.6: Image 1

Which two statements about FortiGate behavior relating to this session are correct? (Choose two.)

A.

FortiGate either initiated the session or the session terminates at FortiGate.

B.

FortiGate redirected the client to the captive portal to authenticate so that a correct policy match could be made.

C.

FortiGate forwarded this session without any inspection.

D.

FortiGate is performing a security profile inspection using the CPU.

Question 10 of 27

Refer to the exhibit.
High Availability configuration status
Exam FCSS_NST_SE-7.6: Image 1

Which two statements about the output are true considering NGFW-1 and NGFW-2 have been up for a week? (Choose two.)

A.

If a configuration change is made to the secondary FortiGate, the Configuration Status will not change.

B.

If a configuration change is made to the primary FortiGate at this time, the secondary will initiate a synchronization reset.

C.

If FGVM...649 is rebooted, FGVM...650 will become the primary FortiGate and retain that role, even after FGVM...649 rejoins the cluster.

D.

If port7 becomes disconnected on the secondary FortiGate, both FortiGate devices will elect themselves as primary.