最新的Fortinet FCSS_NST_SE-7.4免費考試真題

問題1

Refer to the exhibit, which contains the output of the command diagnose vpn tunnel list.

What is the status of the tunnel?

A. Phase 1 is down.

B. Both Phase 1 and Phase 2 were negotiated successfully.

C. Traffic is passing through the tunnel.

D. Phase 2 is down.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題2

Refer to the exhibit showing a debug output.

An administrator deployed FSSO in DC Agent Mode but FSSO is failing on FortiGate. Pinging FortiGate from where the collector agent is deployed is successful. The administrator then produces the debug output shown in the exhibit.
What could be causing this error message?

A. The collector agent preshared password is mismatched.

B. The TCP port 445 is blocked between FortiGate and collector agent.

C. The FortiGate cannot resolve the active directory server name.

D. The FortiGate and the collector agent are using different TCP ports.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題3

Refer to the exhibit. The exhibit shows the output from using the command diagnose debug application samld -1 to diagnose a SAML connection.

Based on this output, what can you conclude?

A. The authentication request is for an SSL VPN connection.

B. The IdP IP address is 10.1.10.2.

C. Active Directory is used for authentication.

D. The IdP IP address is 10.1.10.254.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題4

Which two statements about an auxiliary session ate true? (Choose two.)

A. With the auxiliary session selling disabled, only auxiliary sessions are offloaded.

B. With the auxiliary session setting enabled, ECMP traffic is accelerated to the NP6 processor.

C. With the auxiliary session setting enabled, two sessions are created in case of routing change.

D. With the auxiliary session setting disabled, for each traffic path, FortiGate uses the same auxiliary session.

正確答案: B,C

問題5

Refer to the exhibit, which shows the partial output of command diagnose debug rating.

In this exhibit, which FDS server will the FortiGate algorithm choose?

A. 209.22.147.36

B. 64.26.151.37

C. 66.117.56.37

D. 208.91.112.194

正確答案: B

說明：（僅 Fast2test 成員可見）

問題6

Refer to the exhibit, which shows a partial output from the get router info routing-table database command.

The administrator wants to configure a default static route for port3 and assign a distance of 50 and a priority of 0.
What will happen to the port1 and port2 default static routes after the port3 default static route is created?

A. Both default static routes shown in the output will be injected into the FIB.

B. Neither of the routes shown in the output will be injected into the FIB.

C. The port2 default static route will be injected into the forwarding information base (FIB).

D. The port1 default static route will be injected into the FIB.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題7

Refer to the exhibit. An IPsec VPN tunnel is dropping, as shown by the debug output. Analyzing the debug output, what could be causing the tunnel to go down?

A. The tunnel drops during rekey negotiation.

B. Dead Peer Detection is not receiving its acknowledge packet.

C. The tunnel drops after the timer expires.

D. Phase 2 drops but Phase 1 is up.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題8

For IKEv2, which combination of payloads can INFORMATIONAL exchanges contain?

A. Start, Wait, and Delete

B. Initiator, Responder, and Wait

C. Notify, Delete, and Configuration

D. Create, Remove, and Wait

正確答案: B

最新的Fortinet FCSS - Network Security 7.4 Support Engineer - FCSS_NST_SE-7.4免費考試真題

聯系我們

站內鏈接

最新更新