최신 FCSS_NST_SE-7.4 무료덤프 - Fortinet FCSS - Network Security 7.4 Support Engineer

문제1

An administrator wants to capture encrypted phase 2 traffic between two FotiGate devices using the built-in sniffer.
If the administrator knows that there Is no NAT device located between both FortiGate devices, which command should the administrator run?

A. diagnose sniffer packet any 'ah'

B. diagnose sniffer packet any 'udp port 500'

C. diagnose sniffer packet any 'udp port 4500'

D. diagnose sniffer packet any 'lp proto 50'

정답: D

문제2

Which statement aboutprotocol options is true?

A. Protocol options allow administrators to configure the Any setting for all enabled protocols, which provides the most efficient use of system resources.

B. Protocol options give administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols.

C. Protocol options allow administrators to configure a maximum number of sessions for each configured protocol.

D. Protocol options allow administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on.

정답: D

문제3

Exhibit.

Refer to the exhibit, which shows the output of a diagnose command.
What can you conclude about the debug output in this scenario?

A. FortiGate used 64.26.151.37 as the initial server to validate its contract.

B. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.

C. Servers with a negative TZ value are less preferred for rating requests.

D. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.

정답: B

문제4

In IKEv2, which exchange establishes the first CHILD_SA?

A. INFORMATIONAL

B. IKE_SA_INIT

C. IKE_Auth

D. CREATE_CHILD_SA

정답: D

최신 FCSS_NST_SE-7.4 무료덤프 - Fortinet FCSS - Network Security 7.4 Support Engineer

우리와 연락하기

유용한 링크

최신 업데이트