Question 1

Exhibit.

Refer to the exhibit, which shows the output of a diagnose command.

What can you conclude about the debug output in this scenario?

Options :

A :

The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.

B :

There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.

C : FortiGate used 64.26.151.37 as the initial server to validate its contract.

D : Servers with a negative TZ value are less preferred for rating requests.

Answer: B

Question 2

Refer to the exhibit, which shows partial outputs from two routing debug commands.

Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

Options :

A : Set snat-route-change to enable.

B : Set the priority of the static default route using port2 to 1.

C : Set preserve-session-route to enable.

D : Set the priority of the static default route using port1 to 10.

Answer: D

Question 3

Which statement about protocol options is true?

Options :

A :

Protocol options allow administrators to configure a maximum number of sessions for each configured protocol.

B :

Protocol options give administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols.

C :

Protocol options allow administrators to configure the Any setting for all enabled protocols, which provides the most efficient use of system resources.

D :

Protocol options allow administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on.

Answer: D

Question 4

Which two statements about Security Fabric communications are true? (Choose two.)

Options :

A : FortiTelemetry and Neighbor Discovery both operate using TCP.

B : The default port for Neighbor Discovery can be modified.

C : FortiTelemetry must be manually enabled on the FortiGate interface.

D :

By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.

Answer: C,D

Question 5

Refer to the exhibit, which shows the port1 interface configuration on FortiGate and partial session information for ICMP traffic.

What happens to the session information if a routing change occurs that affects this session?

Options :

A : Only the interface and gateway information for dev=7 will be removed.

B :

The session information will not change unless the current route has been removed from the routing table.

C : The session will be flagged as dirty but no route lookups will be performed.

D : Sessions involving port7 or port19 will not have their routing information flushed.

Answer: B

Free FCSS_NST_SE-7.4 Mock Exam – Practice Online Confidently

Buying Options: