最新的Fortinet Certified Solution Specialist認證 FCSS_NST_SE-7.4考試題庫

問題1

Refer to the exhibit, which shows a partial output from the get router info routing-table database command.

The administrator wants to configure a default static route for port3 and assign a distance of 50 and a priority of 0.
What will happen to the port1 and port2 default static routes after the port3 default static route is created?

A. Both default static routes shown in the output will be injected into the FIB.

B. The port2 default static route will be injected into the forwarding information base (FIB).

C. The port1 default static route will be injected into the FIB.

D. Neither of the routes shown in the output will be injected into the FIB.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題2

Refer to the exhibit, which shows the output of get system ha status.

NGFW-1 and NGFW-2 have been up for a week.
Which two statements about the output are true? (Choose two.)

A. If port 7 becomes disconnected on the secondary, both FortiGate devices will elect itself as primary.

B. If no action is taken, the primary FortiGate will leave the cluster because of the current sync status.

C. If a configuration change is made to the primary FortiGate at this time, the secondary will initiate a synchronization reset.

D. If FGVM...649 is rebooted. FGVM...650 will become the primary and retain that role, even after FGVM...649 rejoins the cluster.

正確答案: A,D

說明：（僅 VCESoft 成員可見）

問題3

Refer to the exhibit, which shows the partial output of a real-time OSPF debug.

Why are the two FortiGate devices unable to form an adjacency?

A. The passwords on the FortiGate devices do not match.

B. The two FortiGate devices attempting adjacency are in area 0.0.0.0.

C. One FortiGate device is configured to require authentication, while the other is not.

D. The Hello packet is being sent from an OSPF router with ID 0.0.0.112.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題4

Refer to the exhibit. Which three pieces of information does the diagnose sys top command provide? (Choose three.)

A. The cmdbsvr process is occupying 2.4% of the total user memory space.

B. The miglogd daemon would be on top of the list, if the administrator pressed m on the keyboard.

C. The diagnose sys top command has been running for 18 minutes.

D. If the neweli daemon continues to be in the R state, it will need to be manually restarted.

E. The miglogd daemon is running on CPU core ID 0.

正確答案: A,C,E

說明：（僅 VCESoft 成員可見）

問題5

Refer to the exhibit, which shows the output of get router info ospf neighbor.

What can you conclude from the command output?

A. The local FortiGate is not a DROther.

B. The network type connecting the local Fortigate and OSPF neighbor 0.0.0.10 is point-to-point.

C. All neighbors are in area 0.0.0.0.

D. The local FortiGate is the BDR.

正確答案: B

問題6

Which exchanges are the first two exchanges in IKEv2 negotiation?

A. INIT_Req and Auth_Request

B. IKE SA_INIT and IKE_Auth

C. Init_Req and Wait_Init_Req

D. Key Exchange and Authentication

正確答案: B

說明：（僅 VCESoft 成員可見）

問題7

Which authentication option can you not configure under config user radius on FortiOS?

A. mschap

B. pap

C. eap

D. mschap2

正確答案: C

問題8

Refer to the exhibit, which contains the output of the command diagnose vpn tunnel list.

Reviewing the debug command, what is the current status of the traffic flowing through the tunnel?

A. There is an unsupported cipher or HMAC

B. The outbound IPsec SA was copied to the NPU.

C. The inbound IPsec SA was copied to the NPU.

D. Traffic is flowing with an asymmetric selector.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題9

Which two statements about an auxiliary session ate true? (Choose two.)

A. With the auxiliary session selling disabled, only auxiliary sessions are offloaded.

B. With the auxiliary session setting enabled, two sessions are created in case of routing change.

C. With the auxiliary session setting enabled, ECMP traffic is accelerated to the NP6 processor.

D. With the auxiliary session setting disabled, for each traffic path, FortiGate uses the same auxiliary session.

正確答案: B,C

最新的Fortinet FCSS - Network Security 7.4 Support Engineer - FCSS_NST_SE-7.4免費考試真題

最新更新

站內鏈接

聯系我們