最新的Fortinet Certified Solution Specialist認證 FCSS_NST_SE-7.6考試題庫

問題1

Exhibit.

Refer to the exhibit, which shows a partial web fillet profile configuration.
Which action does FortiGate lake if a user attempts to access www. dropbox. com, which is categorized as File Sharing and Storage?

A. FortiGate blocks the connection as an invalid URL.

B. FortiGate exempts the connection, based on the Web Content Filter configuration.

C. FortiGate allows the connection, based on the URL Filter configuration.

D. FortiGate blocks the connection, based on the FortiGuard category based filter configuration.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題2

What can cause an IKEv2 tunnel to go down after it was initially brought up successfully?

A. A mismatched proposal was detected during the IKE_AUTH exchange.

B. A mismatched pre-shared key was detected during the IKE_AUTH exchange.

C. Mismatched traffic selectors (phase 2 / "quick-mode selectors") were detected during the CREATE_CHILD_SA exchange.

D. A mismatched Diffie-Hellman group was detected during the IKE_SA_INIT exchange.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題3

Refer to the exhibit.

The partial output of diagnose sys session stat command is shown.
Which statement about the output shown in the exhibit is correct?

A. There have been 131072 recorded ephemeral sessions but there are no current ones.

B. 27 sessions have expired but are still in the session table in case any out-of-order packets arrive.

C. 113 sessions have been dropped because of memory page exhaustion.

D. 562 TCP sessions have their proto_state set to 01 if there is no inspection.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題4

Refer to the exhibit.

An IPsec VPN tunnel is dropping, as shown by the debug output.
Analyzing the debug output, what could be causing the tunnel to go down?

A. Dead Peer Detection is not receiving its acknowledge packet.

B. The tunnel drops during rekey negotiation.

C. The tunnel drops after the timer expires.

D. Phase 2 drops but Phase 1 is up.

正確答案: A

問題5

Refer to the exhibit, which shows a partial output of the fssod daemon real-time debug command.

What two conclusions can you draw from the output? (Choose two.)

A. The workstation with IP 10.124.2.90 will be polled frequently using TCP port 445 to see if the user is still logged on.

B. FSSO is using agentless polling mode to detect logon events.

C. FSSO is using DC agent mode to detect logon events.

D. The logon event can be seen on the collector agent installed on Windows.

正確答案: A,B

說明：（僅 VCESoft 成員可見）

問題6

Which two statements about application-layer test commands are true? (Choose two answers)

A. Some of them display statistics and configuration information about a feature or process.

B. Some of them display output only after you run the diagnose debug console enable command.

C. Some of them display real-time application debugs.

D. Some of them can be used to restart an application.

正確答案: A,D

說明：（僅 VCESoft 成員可見）

問題7

Exhibit.

Refer to the exhibit, which contains partial output from an IKE real-time debug.
Which two statements about this debug output are correct? (Choose two.)

A. It shows a phase 2 negotiation.

B. The local gateway IP address is 10.0.0.1.

C. Perfect Forward Secrecy (PFS) is enabled in the configuration.

D. The initiator provided remote as its IPsec peer ID.

正確答案: A,D

說明：（僅 VCESoft 成員可見）

問題8

Refer to the exhibit, which shows the output of a BGP debug command.

What can you conclude about the router in this scenario?

A. The router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the 8GP session with the local router.

B. The BGP session with peer 10.127.0.75 is up.

C. All of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4.

D. An inbound route-map on local router is blocking the prefixes from neighbor 100.64.3.1.

正確答案: B

說明：（僅 VCESoft 成員可見）

最新的Fortinet FCSS - Network Security 7.6 Support Engineer - FCSS_NST_SE-7.6免費考試真題

最新更新

站內鏈接

聯系我們