File Info
| Exam | FCSS-Network Security 7.4 Support Engineer |
| Number | FCSS_NST_SE-7.4 |
| File Name | Fortinet.FCSS_NST_SE-7.4.VCEplus.2024-10-19.22q.tqb |
| Size | 3 MB |
| Posted | Oct 19, 2024 |
| Download | Fortinet.FCSS_NST_SE-7.4.VCEplus.2024-10-19.22q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Exhibit.
Refer to the exhibit, which shows the output of get system ha status.
NGFW-1 and NGFW-2 have been up for a week.
Which two statements about the output are true? (Choose two)
- If a configuration change is made to the primary FortiGate at this time, the secondary will initiate a synchronization reset.
- If port 7 becomes disconnected on the secondary, both FortiGate devices will elect itself as primary.
- If FGVM...649 is rebooted. FGVM...650 will become the primary and retain that role, even after FGVM...649 rejoins the cluster.
- If no action is taken, the primary FortiGate will leave the cluster because of the current sync status.
Correct answer: BC
Question 2
Exhibit.
Refer to the exhibit, which shows a partial web fillet profile configuration.
Which action does FortiGate lake if a user attempts to access www. dropbox. com, which is categorized as File Sharing and Storage?
- FortiGate allows the connection, based on the URL Filter configuration.
- FortiGate blocks the connection as an invalid URL.
- FortiGate exempts the connection, based on the Web Content Filter configuration.
- FortiGate blocks the connection, based on the FortiGuard category based filter configuration.
Correct answer: D
Question 3
Refer to the exhibit, which shows the omitted output of a session table entry.
Which two statements are true? (Choose two)
- The traffic has been tagged for VLAN 0000.
- NP7 is handling offloading of this session.
- The traffic matches Policy ID 1.
- The session has been offloaded.
Correct answer: BD
Question 4
Refer to the exhibit.
Assuming a default configuration, which three statements are true? (Choose three)
- Strict RPF is enabled by default.
- User B: Fail. There is no route to 95.56.234.24 using wan2 in the routing table.
- User A: Pass. The default static route through wan1 passes the RPF check regardless of the source IP address.
- User B: Pass. FortiGate will use asymmetric routing using wan1 to reply to traffic for 95.56.234.24.
- User C: Fail. There is no route to 10.0.4.63 using port1 in the touting table.
Correct answer: BDE
Question 5
Which two statements about Security Fabric communications are true? (Choose two)
- FortiTelemetry and Neighbor Discovery both operate using TCP.
- The default port for Neighbor Discovery can be modified.
- FortiTelemetry must be manually enabled on the FortiGate interface.
- By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.
Correct answer: CD
Question 6
Refer to the exhibit, which contains the output of diagnose vpn tunnel list.
Which command will capture ESP traffic for the VPN named DialUp_0?
- diagnose sniffer packet any 'ip proto 50'
- diagnose sniffer packet any 'host 10.0.10.10'
- diagnose sniffer packet any 'esp and host 10.200.3.2'
- diagnose sniffer packet any 'port 4500'
Correct answer: D
Question 7
Which two statements are true regarding heartbeat messages sent from an FSSO collector agent to FortiGate? (Choose two)
- The heartbeat messages can be seen using the command diagnose debug authd fsso list.
- The heartbeat messages can be seen in the collector agent logs.
- The heartbeat messages can be seen on FortiGate using the real-lime FSSO debug.
- The heartbeat messages must be manually enabled on FortiGate.
Correct answer: BC
Question 8
Refer to the exhibit, which shows a truncated output of a real-time LDAP debug.
What two conclusions can you draw from the output? (Choose two)
- The name of the configured LDAP server is Lab.
- The user is authenticating using CN=John Smith.
- FortiOS is able to locate the user in step 3 (Bind Request) of the LDAP authentication process.
- FortiOS is performing the second step (Search Request) in the LDAP authentication process.
Correct answer: BD
Question 9
Refer to the exhibit, which shows a session entry.
Which statement about this session is true?
- Return traffic to the initiator is sent to 10.1.0.1.
- Return traffic to the initiator is sent lo 10.200.1.254.
- It is an ICMP session from 10.1.10.10 to 10.200.1.1.
- It is an ICMP session from 10.1.10.1 to 10.200.5.1.
Correct answer: D
Question 10
Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate.
Which action will FortiGate take when using the default settings for SSL certificate inspection?
- FortiGate uses the SNI from the user's web browser.
- FortiGate closes the connection because this represents an invalid SSL/TLS configuration.
- FortiGate uses the first entry listed in the SAN field in the server certificate.
- FortiGate uses the ZN information from the Subject field in the server certificate.
Correct answer: C
