距離 Fortinet FCSS - Enterprise Firewall 7.4 Administrator 考試的日子越來越近，卻總覺得複習進度追不上計畫？Fast2test 的 FCSS_EFW_AD-7.4 題庫收錄 78 道練習題，幫助你把有限的備考時間用在真正會出題的重點上。

Fortinet FCSS_EFW_AD-7.4 考試概覽:

Fortinet FCSS_EFW_AD-7.4 考試大綱主題:

Fortinet FCSS_EFW_AD-7.4 考試疑問總整理

最新的 Fortinet Certified Solution Specialist FCSS_EFW_AD-7.4 免費考試真題：

問題 #1

Refer to the exhibit.

An administrator is deploying a hub and spokes network and using OSPF as dynamic protocol.
Which configuration is mandatory for neighbor adjacency?

A. Set virtual-link enable in the hub interface
B. Set bfd enable in the router configuration
C. Set rfc1583-compatible enable in the router configuration
D. Set network-type point-to-multipoint in the hub interface

問題 #2

Refer to the exhibit, which shows a partial routing table.

What two conclusions can you draw from the FortiGate output shown in the exhibit? (Choose two.)

A. add-route is enabled in the tunnel IPSec phase 1 configuration.
B. net-device is disabled in the tunnel IPSec phase 1 configuration.
C. FortiGate is not using the destination subnets of the quick mode selectors to populate the routing table.
D. FortiGate creates separate virtual interfaces for each VPN client.

問題 #3

A FortiGate device with UTM profiles is reaching the resource limits, and the administrator expects the traffic in the enterprise network to increase.
The administrator has received an additional FortiGate of the same model. Which two protocols should the administrator use to integrate the additional FortiGate device into this enterprise network? (Choose two.)

A. FGCP in active-active mode and with switches
B. VRRP with switches
C. FGCP in active-passive mode and with VDOM disabled
D. FGSP with external load balancers

問題 #4

Refer to the exhibits.



The configuration of a user's Windows PC, which has a default MTU of 1500 bytes, along with FortiGate interfaces set to an MTU of 1000 bytes, and the results of PC1 pinging server
172.16.0.254 are shown.
Why is the user in Windows PC1 unable to ping server 172.16.0.254 and is seeing the message:
Packet needs to be fragmented but DF set?

A. FortiGate honors the do not fragment bit and the packets are dropped. The user has to adjust the ping MTU to 972 to succeed.
B. The user must trigger different traffic because path MTU discovery techniques do not recognize ICMP payloads.
C. Fragmented packets must be encrypted. To connect any application successfully, the user must install the Fortinet_CA certificate in the Microsoft Management Console.
D. Option ip.flags.mf must be set to enable on FortiGate. The user has to adjust the ping MTU to
1000 to succeed.

問題 #5

An administrator must standardize the deployment of FortiGate devices across branches with consistent interface roles and policy packages using FortiManager. What is the recommended best practice for interface assignment in this scenario?

A. Create normalized interface types per-platform to automatically recognize device layer interfaces based on the FortiGate model and interface name.
B. Create interfaces using device database scripts to use them on the same policy package of FortiGate devices.
C. Enable metadata variables to use dynamic configurations in the standard interfaces of FortiManager.
D. Use the Install On feature in the policy package to automatically assign different interfaces based on the branch.

問題與答案：