최신 FCSS_NST_SE-7.4 무료덤프 - Fortinet FCSS - Network Security 7.4 Support Engineer

문제1

Exhibit 1.

Exhibit 2.

Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network.
An administrator would like to lest session failover between the two service provider connections.
Which two changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)

A. Change the priority of the port! static route to 11.

B. Change the priority of the port2 static route to 5.

C. Configure set snat-route-change enable.

D. Configure unset snat-route-change to return it to the default setting.

정답: A,C

문제2

In IKEv2, which exchange establishes the first CHILD_SA?

A. INFORMATIONAL

B. IKE_SA_INIT

C. IKE_Auth

D. CREATE_CHILD_SA

정답: D

문제3

Exhibit.

Refer to the exhibit, which shows the output of a diagnose command.
What can you conclude about the debug output in this scenario?

A. FortiGate used 64.26.151.37 as the initial server to validate its contract.

B. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.

C. Servers with a negative TZ value are less preferred for rating requests.

D. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.

정답: B

문제4

Exhibit.

Refer to the exhibit, which contains a screenshot of some phase 1 settings.
The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

However, the IKE real-time debug does not show any output. Why?

A. The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.

B. The administrator must also run the command diagnose debug enable.

C. Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.

D. The log-filter setting is incorrect. The VPN traffic does not match this filter.

정답: B

문제5

Refer to the exhibit.

Which three pieces of information does the diagnose sys top command provide? (Choose three.)

A. The miglogd daemon is running on CPU core ID 0.

B. If the neweli daemon continues to be in the R state, it will need to be manually restarted.

C. The miglogd daemon would be on top of the list, if the administrator pressed m on the keyboard.

D. The cmdbsvr process is occupying 2.4% of the total user memory space.

E. The diagnose sys top command has been running for 18 minutes.

정답: A,C,D

문제6

Refer to the exhibit.

An IPsec VPN tunnel is dropping, as shown by the debug output.
Analyzing the debug output, what could be causing the tunnel to go down?

A. The tunnel drops after the timer expires.

B. Dead Peer Detection is not receiving its acknowledge packet.

C. Phase 2 drops but Phase 1 is up.

D. The tunnel drops during rekey negotiation.

정답: B

문제7

What are two functions of automation stitches? (Choose two.)

A. You can configure automation stitches to execute actions sequentially by taking parameters from previous actions as input for the current action.

B. You can configure automation stitches on any FortiGate device in a Security Fabric environment.

C. You can create automation stitches to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.

D. You can set an automation stitch configured to execute actions in parallel to insert a specific delay between actions.

정답: A,C

최신 FCSS_NST_SE-7.4 무료덤프 - Fortinet FCSS - Network Security 7.4 Support Engineer

우리와 연락하기

유용한 링크

최신 업데이트