最新的Fortinet FCSS_NST_SE-7.6免費考試真題

問題1

Refer to the exhibit, which shows one way communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.

What three actions must you take to ensure successful communication? (Choose three.)

A. You must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.

B. You must authorize the downstream FortiGate on the root FortiGate.

C. FortiGate must not be in NAT mode.

D. Ensure the port for Neighbor Discovery has been changed.

E. Ensure TCP port 8013 is not blocked along the way.

正確答案: A,B,E

問題2

Refer to the exhibit, which shows partial outputs from two routing debug commands.

Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

A. Set snat-route-change to enable.

B. Set the priority of the static default route using port2 to 1.

C. Set the priority of the static default route using port1 to 10.

D. Set preserve-session-route to enable.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題3

Refer to the exhibit, which shows the partial output of command diagnose debug rating.

In this exhibit, which FDS server will the FortiGate algorithm choose?

A. 209.22.147.36

B. 64.26.151.37

C. 66.117.56.37

D. 208.91.112.194

正確答案: B

問題4

Refer to the exhibit.

The output of the get router info bgp summary command is shown.
Which statement regarding adjacencies between the local router and its neighbors is correct?

A. The local router and neighbor 100.64.2.254 are unable to establish adjacency because the TCP session could not be established.

B. The local router and neighbor 100.64.1.254 established adjacency because the priority of 100.64.1.254 is higher than that of 100.64.2.254.

C. The local router and neighbor 100.64.2.254 are unable to establish adjacency because AS 100 is already used by neighbor 100.64.1.254.

D. The local router and neighbor 100.64.2.254 are unable to establish adjacency until the adjacency with neighbor 100.64.1.254 ceases.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題5

Exhibit.

Refer to the exhibit, which shows the output of get system ha status.
NGFW-1 and NGFW-2 have been up for a week.
Which two statements about the output are true? (Choose two.)

A. If no action is taken, the primary FortiGate will leave the cluster because of the current sync status.

B. If a configuration change is made to the primary FortiGate at this time, the secondary will initiate a synchronization reset.

C. If port 7 becomes disconnected on the secondary, both FortiGate devices will elect itself as primary.

D. If FGVM...649 is rebooted. FGVM...650 will become the primary and retain that role, even after FGVM...649 rejoins the cluster.

正確答案: C,D

說明：（僅 Fast2test 成員可見）

問題6

Refer to the exhibit, which shows the output of a diagnose command. What can you conclude from the RTT value?

A. Its initial value is statically set to 10.

B. It determines which FortiGuard server is used for license validation.

C. Its value represents the time it takes to receive a response after a rating request is sent to a particular server.

D. Its value is incremented with each packet lost.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題7

Refer to the exhibit, which shows the output o! the BGP database.

Which two statements are correct? (Choose two.)

A. The advertised prefix of 10.20.30.0/24 is being advertised through the redistribution of another routing protocol.

B. The output shows all prefixes advertised by all neighbors as well as the local router.

C. The first four prefixes are being advertised using a legacy route advertisement.

D. The advertised prefix of 10.20.30.0/24 was configured using the network command.

正確答案: B,D

說明：（僅 Fast2test 成員可見）

問題8

Refer to the exhibit.

The modified output of live routing kemel is shown
Which two statements about the output are (rue? (Choose two.)

A. The local FortiGate is receiving only one LSA from one OSPF neighbor.

B. The default static route through 10.200.1 254 is in the forwarding information base.

C. FortiGate is performing ECMP using both default static routes.

D. The BGP route to 10.0.4.0/24 is not in the forwarding information base.

正確答案: B,D

說明：（僅 Fast2test 成員可見）

問題9

What can cause an IKEv2 tunnel to go down after it was initially brought up successfully?

A. Mismatched quick-mode selectors were detected during the CREATE_CHILD_SA exchange.

B. A mismatched pre-shared key was detected during the IKE_AUTH exchange.

C. A mismatched Diffie-Hellman group was detected during the IKE_SA_INIT exchange.

D. A mismatched proposal was detected during the IKE_AUTH exchange.

正確答案: A

說明：（僅 Fast2test 成員可見）

最新的Fortinet FCSS - Network Security 7.6 Support Engineer - FCSS_NST_SE-7.6免費考試真題

聯系我們

站內鏈接

最新更新