Fortinet FCSS_NST_SE-7.6 考試大綱：

主題	簡介
主題 1	Authentication: This section evaluates the abilities of System Administrators and requires troubleshooting both local and remote authentication methods, including resolving Fortinet Single Sign-On (FSSO) problems for secure network access.
主題 2	System troubleshooting: This section of the exam measures the skills of Network Security Support Engineers and addresses diagnosing and correcting issues within Security Fabric setups, automation stitches, resource utilization, general connectivity, and different operation modes in FortiGate HA clusters. Candidates work with built-in tools to effectively find and resolve faults.
主題 3	VPN: This section is aimed at IT Professionals and includes diagnosing and addressing issues with IPsec VPNs, specifically IKE version 1 and 2, to secure remote and site-to-site connections within the network infrastructure.
主題 4	Routing: This section focuses on Network Engineers and involves tackling issues related to packet routing using static routes, as well as OSPF and BGP protocols to support enterprise network traffic flow.
主題 5	Security profiles: This part measures skills of Security Operations Specialists and covers identifying and resolving problems linked to FortiGuard services, web filtering configurations, and intrusion prevention systems to maintain protection across network environments.

參考：https://nseti-pdfs.s3.us-west-2.amazonaws.com/desc/Network_Security_Support_Engineer_7.6_Exam_Description.pdf

Fortinet FCSS_NST_SE-7.6 考試概覽:

認證廠商:	Fortinet
考試名稱:	FCSS - Network Security 7.6 Support Engineer
考試代碼:	FCSS_NST_SE-7.6
考試形式:	多選題, 情景題
相關認證:	Fortinet NSE 4 Network Security Professional (legacy equivalent) Fortinet Certified Professional (FCP) - Network Security
支援語言:	英文
推薦課程:	Fortinet 網路安全培訓
考試報名:	Fortinet Training Institute 認證入口
範例考題:	Fortinet FCSS_NST_SE-7.6 範例考題
考試方式:	線上監考考試，透過 Fortinet 認證平台或授權的測試交付系統進行。
必備條件:	建議：具備 Fortinet Certified Professional (FCP) - Network Security 認證或具有 FortiGate 防火牆的實踐經驗。
官方大綱網址:	https://training.fortinet.com

最新的 Fortinet Certified Solution Specialist FCSS_NST_SE-7.6 免費考試真題：

問題 #1

Refer to the exhibit, which a network topology and a partial routing table.

FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3.
Which changes must the administrator perform to ensure the server at 10.4.0.1/24 receives the echo reply from the laptop at 10.1.0.1/24?

A. Enable asymmetric routing under config system settings.
B. A firewall policy that allows all ICMP traffic from port3 to port1.
C. Change the configuration from strict RPF check mode to feasible RPF check mode.
D. Modify the default gateway on the laptop from 10.1.0.2 to 10.2.0.2.

顯示解答討論 0

答案：A 🗳️

問題 #2

Refer to the exhibit, which shows the output of the command get router info ospf neighbor.

To what extent does FortiGate operate when looking at its OSPF neighbors? (Choose two.)

A. The local FortiGate has at least one interface that participates in a broadcast network.
B. The local FortiGate has at least one interface that participates in a point-to-point network.
C. The local FortiGate is the DR.
D. Neighbor 0.0.0.18 is the designated router (DR).

顯示解答討論 0

答案：A,B 🗳️

說明：（僅 VCESoft 成員可見）

問題 #3

Refer to the exhibit.

The port1 interface configuration on FortiGate and partial session information for ICMP traffic are shown.
Which two things happen to the session information if a routing change occurs that affects this session?
(Choose two answers)

A. This session will be unaffected by routing changes. The routing changes will apply only to new sessions.
B. The session information will not change unless the current route has been removed from the routing table.
C. The session will be flagged as dirty but no route lookups will be performed.
D. The session information will not change even when the active route has been removed from the routing table.

顯示解答討論 0

答案：A,B 🗳️

說明：（僅 VCESoft 成員可見）

問題 #4

Refer to the exhibits.

FGT-1 is an area border router (ABR) that has interfaces in OSPF areas 0.0.0.0 and 0.0.0.5. FGT-3 acts as an autonomous system border router (ASBR), importing static routes into OSPF. FGT-2 is an internal router with all its interfaces belonging to area 0.0.0.5. FGT-1 is receiving all advertised routes from FGT-2, however, FGT-3 is not receiving any of the advertised routes from FGT-1. What is the most likely reason for this?
(Choose one answer)

A. FGT-3 and FGT-2 have not formed an OSPF adjacency yet.
B. IP protocol 89 is blocked between FGT-1 and FGT-3.
C. FGT-2 is configured with a distribution list to block all advertised routes from FGT-3.
D. Area 0.0.0.5 is configured not to propagate type 5 LSAs.

顯示解答討論 0

答案：D 🗳️

說明：（僅 VCESoft 成員可見）

問題 #5

Exhibit.

Refer to the exhibit, which shows a partial web fillet profile configuration.
Which action does FortiGate lake if a user attempts to access www. dropbox. com, which is categorized as File Sharing and Storage?

A. FortiGate blocks the connection as an invalid URL.
B. FortiGate exempts the connection, based on the Web Content Filter configuration.
C. FortiGate allows the connection, based on the URL Filter configuration.
D. FortiGate blocks the connection, based on the FortiGuard category based filter configuration.

顯示解答討論 0

答案：D 🗳️

說明：（僅 VCESoft 成員可見）

正在檢視第 1 頁（共 28 頁）。
正在檢視第 1-5 題（共 136 題）。