Fortinet FCSS_NST_SE-7.4 Exam Questions - Real Practice Questions for Guaranteed Success

Question 2

Refer to the exhibit, which shows the output of a BGP debug command.

What can you conclude about the router in this scenario?

AThe router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the 8GP session with the local router.

BAn inbound route-map on local router is blocking the prefixes from neighbor 100.64.3.1.

CAll of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4.

DThe BGP session with peer 10.127.0.75 is up.

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the 8GP session with the local router.

BAn inbound route-map on local router is blocking the prefixes from neighbor 100.64.3.1.

CAll of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4.

DThe BGP session with peer 10.127.0.75 is up.

0 / 1500

Question 3

Which two statements about an auxiliary session ate true? (Choose two.)

AWith the auxiliary session selling disabled, only auxiliary sessions are offloaded.

BWith the auxiliary session setting enabled. ECMP traffic is accelerated to the NP6 processor.

CWith the auxiliary session setting enabled. Iwo sessions are created in case of routing change.

DWith the auxiliary session setting disabled, for each traffic path. FortiGate uses the same auxiliary session.

Correct : B, C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AWith the auxiliary session selling disabled, only auxiliary sessions are offloaded.

BWith the auxiliary session setting enabled. ECMP traffic is accelerated to the NP6 processor.

CWith the auxiliary session setting enabled. Iwo sessions are created in case of routing change.

DWith the auxiliary session setting disabled, for each traffic path. FortiGate uses the same auxiliary session.

0 / 1500

Question 4

Exhibit.

Refer to the exhibit, which contains a screenshot of some phase 1 settings.

The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

However, the IKE real-time debug does not show any output. Why?

AThe administrator must also run the command diagnose debug enable.

BThe debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.

CThe log-filter setting is incorrect. The VPN traffic does not match this filter.

DReplace diagnose debug application ike -1 with diagnose debug application ipsec -1.

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe administrator must also run the command diagnose debug enable.

BThe debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.

CThe log-filter setting is incorrect. The VPN traffic does not match this filter.

DReplace diagnose debug application ike -1 with diagnose debug application ipsec -1.

0 / 1500

Question 5

Which two statements are true regarding heartbeat messages sent from an FSSO collector agent to FortiGate? (Choose two.)

AThe heartbeat messages can be seen using the command diagnose debug authd fsso list.

BThe heartbeat messages can be seen in the collector agent logs.

CThe heartbeat messages can be seen on FortiGate using the real-lime FSSO debug.

DThe heartbeat messages must be manually enabled on FortiGate.

Correct : B, C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe heartbeat messages can be seen using the command diagnose debug authd fsso list.

BThe heartbeat messages can be seen in the collector agent logs.

CThe heartbeat messages can be seen on FortiGate using the real-lime FSSO debug.

DThe heartbeat messages must be manually enabled on FortiGate.

0 / 1500

Master Fortinet FCSS_NST_SE-7.4 Exam with Reliable Practice Questions

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: