최신 FCSS_NST_SE-7.6 무료덤프 - Fortinet FCSS - Network Security 7.6 Support Engineer

문제1

Refer to the exhibit.

The output of diagnose sys session list command is shown.
If the HA ID for the primary device is 9, what happens if the primary fails and the secondary becomes the primary?

A. The session is synchronized with the secondary device, however, because application control is applied.
the session is marked dirty and has to be reevaluated after failover.

B. The session state is preserved but the kernel will re-evaluate the session because the routing information will be flushed

C. The session will be removed from the session table of the secondary device because the TCP session is not yet fully established.

D. The session continues to permit traffic on the new primary device after failover. without requiring the client to restart the session with the server.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Refer to the exhibit, which shows the output o! the BGP database.

Which two statements are correct? (Choose two.)

A. The advertised prefix of 10.20.30.0/24 is being advertised through the redistribution of another routing protocol.

B. The advertised prefix of 10.20.30.0/24 was configured using the network command.

C. The first four prefixes are being advertised using a legacy route advertisement.

D. The output shows all prefixes advertised by all neighbors as well as the local router.

정답: B,D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

Refer to the exhibit, which shows a session entry.

Which statement about this session is true?

A. It is an ICMP session from 10.1.10.10 to 10.200.1.1.

B. Return traffic to the initiator is sent lo 10.200.1.254.

C. Return traffic to the initiator is sent to 10.1.0.1.

D. It is an ICMP session from 10.1.10.1 to 10.200.5.1.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Refer to the exhibit, which shows the output of a diagnose command. What can you conclude from the RTT value?

A. Its value represents the time it takes to receive a response after a rating request is sent to a particular server.

B. Its value is incremented with each packet lost.

C. Its initial value is statically set to 10.

D. It determines which FortiGuard server is used for license validation.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Refer to the exhibit.

Partial output of the get vpn ipsec tunnel details command is shown. Based on the output, which two statements are correct? (Choose two.)

A. The npu_flag for this tunnel is 03.

B. Anti-replay is enabled.

C. The npu_flag for this tunnel is 02.

D. Different SPI values are a result of auto-negotiation being disabled for phase2 selectors.

정답: A,B

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Exhibit 1.

Exhibit 2.

Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network.
An administrator would like to lest session failover between the two service provider connections.
Which two changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)

A. Change the priority of the port2 static route to 5.

B. Change the priority of the port1 static route to 11.

C. Configure set snat-route-change enable.

D. Configure unset snat-route-change to return it to the default setting.

정답: B,C

설명: (DumpTOP 회원만 볼 수 있음)

문제7

What is an accurate description of LDAP authentication using the regular bind type?

A. The regular bind requires the client to send the full distinguished name (ON).

B. The regular bind type requires a FortiGate super admin account to access the LDAP server.

C. The regular bind type is the easiest bind type to configure on ForbOS.

D. It is not often used as a bind type

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Exhibit.

Refer to the exhibit, which shows the output of a diagnose command.
What can you conclude about the debug output in this scenario?

A. FortiGate used 64.26.151.37 as the initial server to validate its contract.

B. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.

C. Servers with a negative TZ value are less preferred for rating requests.

D. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Refer to the exhibits, which contain the partial configurations of two VPNs on FortiGate.

An administrator has configured two VPNs for two different user groups. Users who are in the Users-2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovers that FortiGate is not matching the user-2 VPN for members of the Users-2 group.
Which two changes must the administrator make to fix the issue? (Choose two.)

A. Use different pre-shared keys on both VPNs.

B. Set up specific peer IDs on both VPNs.

C. Change to aggressive mode on both VPNs.

D. Enable XAuth on both VPNs.

정답: B,C

설명: (DumpTOP 회원만 볼 수 있음)

문제10

Which three common FortiGate-to-collector-agent connectivity issues can you identify using the FSSO real- time debug? (Choose three.)

A. FortiGate cannot reach the IP address of the collector agent.

B. The SSL certificate used for FSSO over SSL has expired.

C. The group filters do not match.

D. The pro-shared key does not match

E. The connection was refused. There may be a mismatch of the TCP port.

정답: A,D,E

설명: (DumpTOP 회원만 볼 수 있음)

최신 FCSS_NST_SE-7.6 무료덤프 - Fortinet FCSS - Network Security 7.6 Support Engineer

우리와 연락하기

유용한 링크

최신 업데이트