最新的Fortinet Certified Solution Specialist認證 FCSS_NST_SE-7.6考試題庫

問題1

Refer to the exhibit.

A network topology and a partial routing table are shown.
FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3.
Which two changes can the administrator perform to ensure the server at 10.4.0.1/24 receives the ICMP echo reply from the laptop at 10.1.0.1/24? (Choose two.)

A. Enable asymmetric routing under config system settings.

B. Add a default static route on FortiGate to forward all traffic to port3.

C. Change the FortiGate configuration from strict RPF check mode to feasible RPF check mode.

D. Modify the default gateway on the laptop from 10.1.0.2 to 10.1.0.254.

正確答案: A,D

說明：（僅 VCESoft 成員可見）

問題2

Which two statements about Security Fabric communications are true? (Choose two.)

A. By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.

B. The default ports for FortiTelemetry and Neighbor Discovery can be modified.

C. FortiTelemetry must be manually enabled on the FortiGate interface.

D. Security Fabric communication is enabled by default among all Fortinet devices.

正確答案: A,C

說明：（僅 VCESoft 成員可見）

問題3

Refer to the exhibit, which shows the partial output of FortiOS kernel slabs.

Which statement is true?

A. The total slab size of the ip6_session slab is 1300 kB and is associated with the kernel.

B. The total slab size of the ip_session slab is 3600 kB and is associated with the user space.

C. The total slab size of the sctp_session slab is 0 kB and is associated with the user space.

D. The total slab size of the tcp_session slab is 7500 kB and is associated with the kernel.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題4

Exhibit.

Refer to the exhibit, which shows the output of a diagnose command.
What can you conclude about the debug output in this scenario?

A. Servers with a negative TZ value are less preferred for rating requests.

B. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.

C. FortiGate used 64.26.151.37 as the initial server to validate its contract.

D. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題5

Refer to the exhibit, which shows a partial output of the fssod daemon real-time debug command.

What two conclusions can you draw from the output? (Choose two.)

A. The workstation with IP 10.124.2.90 will be polled frequently using TCP port 445 to see if the user is still logged on.

B. FSSO is using agentless polling mode to detect logon events.

C. FSSO is using DC agent mode to detect logon events.

D. The logon event can be seen on the collector agent installed on Windows.

正確答案: A,B

說明：（僅 VCESoft 成員可見）

問題6

Refer to the exhibit.

A partial output of diagnose npu up6 port-list on FortiGate 2000E is shown.
An administrator is unable to analyze traffic flowing between port1 and port17 using the diagnose sniffer command.
Which two commands allow the administrator to view the traffic? (Choose two.)

A.