最新的Fortinet Certified Solution Specialist認證 FCSS_NST_SE-7.4考試題庫

問題1

Refer to the exhibit, which shows a session entry.

Which statement about this session is true?

A. It is an ICMP session from 10.1.10.1 to 10.200.5.1.

B. Return traffic to the initiator is sent to 10.1.0.1.

C. Return traffic to the initiator is sent lo 10.200.1.254.

D. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

正確答案: A

問題2

What are two reasons you might see iprope_in_check() check failed, drop when using the debug flow? (Choose two.)

A. Packet was dropped because of policy route misconfiguration.

B. VIP or IP pool misconfiguration.

C. Trusted host list misconfiguration.

D. Packet was dropped because of traffic shaping.

正確答案: B,C

問題3

Refer to the exhibit.

Assuming a default configuration, which three statements are true? (Choose three.)

A. User B: Fail. There is no route to 95.56.234.24 using wan2 in the routing table.

B. User C: Fail. There is no route to 10.0.4.63 using port1 in the touting table.

C. Strict RPF is enabled by default.

D. User A: Pass. The default static route through wan1 passes the RPF check regardless of the source IP address.

E. User B: Pass. FortiGate will use asymmetric routing using wan1 to reply to traffic for 95.56.234.24.

正確答案: A,B,E

問題4

Which statement about IKEv2 is true?

A. IKEv1 and IKEv2 share the concept of phase1 and phase2.

B. IKEv1 and IKEv2 use same TCP port but run on different UDP ports.

C. Both IKEv1 and IKEv2 share the feature of asymmetric authentication.

D. IKEv1 and IKEv2 have enough of the header format in common that both versions can run over the same UDP port.

正確答案: D

問題5

Which two statements about Security Fabric communications are true? (Choose two.)

A. By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.

B. FortiTelemetry and Neighbor Discovery both operate using TCP.

C. FortiTelemetry must be manually enabled on the FortiGate interface.

D. The default port for Neighbor Discovery can be modified.

正確答案: A,C

問題6

Refer to the exhibit, which shows the output o! the BGP database.

Which two statements are correct? (Choose two.)

A. The advertised prefix of 10.20.30.0'24 was configured using the network command.

B. The output shows all prefixes advertised by all neighbors as well as the local router.

C. The first four prefixes are being advertised using a legacy route advertisement.

D. The advertised prefix of 10.20.30.0'24 is being advertised through the redistribution of another routing protocol.

正確答案: A,B

問題7

Which two statements are true regarding heartbeat messages sent from an FSSO collector agent to FortiGate? (Choose two.)

A. The heartbeat messages can be seen using the command diagnose debug authd fsso list.

B. The heartbeat messages can be seen in the collector agent logs.

C. The heartbeat messages can be seen on FortiGate using the real-lime FSSO debug.

D. The heartbeat messages must be manually enabled on FortiGate.

正確答案: B,C

最新的Fortinet FCSS - Network Security 7.4 Support Engineer - FCSS_NST_SE-7.4免費考試真題

最新更新

站內鏈接

聯系我們