[2026] Fortinet FCSS - Network Security 7.4 Support Engineer

문제1

Refer to the exhibit, which contains the partial configuration of an IPsec VPN configuration.

After reviewing the configuration, what can you conclude about the IPsec VPN Phase 1 setup?

A. The VPN is configured with DHCP over IPsec.

B. The tunnel is configured as a route-based VPN.

C. Dead Peer Detection is disabled.

D. The VPN is configured using IKEv2.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제2

Which statement about IKEv2 is true?

A. IKEv1 and IKEv2 share the concept of phase1 and phase2.

B. Both IKEv1 and IKEv2 share the feature of asymmetric authentication.

C. IKEv1 and IKEv2 have enough of the header format in common that both versions can run over the same UDP port.

D. IKEv1 and IKEv2 use same TCP port but run on different UDP ports.

정답: C

문제3

For IKEv2, which combination of payloads can INFORMATIONAL exchanges contain?

A. Initiator, Responder, and Wait

B. Create, Remove, and Wait

C. Notify, Delete, and Configuration

D. Start, Wait, and Delete

정답: A

문제4

Refer to the exhibit. The exhibit shows the output from using the command diagnose debug application samld -1 to diagnose a SAML connection.

Based on this output, what can you conclude?

A. The IdP IP address is 10.1.10.2.

B. The IdP IP address is 10.1.10.254.

C. Active Directory is used for authentication.

D. The authentication request is for an SSL VPN connection.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제5

Refer to the exhibit, which shows a FortiGate configuration. An administrator is troubleshooting a web filter issue on FortiGate.
The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator do to fix the issue?

A. Set sdns-server-ipto service.fortiguard.net.

B. Disable webfilter-force-offat the VDOM level.

C. Change protocolto TCP and port to 53.

D. Disable webfilter-force-off.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제6

Refer to the exhibit, which shows partial outputs from two routing debug commands.

Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

A. Set the priority of the static default route using port1 to 10.

B. Set snat-route-change to enable.

C. Set preserve-session-route to enable.

D. Set the priority of the static default route using port2 to 1.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제7

Which two statements about Security Fabric communications are true? (Choose two.)

A. By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.

B. The default port for Neighbor Discovery can be modified.

C. FortiTelemetry must be manually enabled on the FortiGate interface.

D. FortiTelemetry and Neighbor Discovery both operate using TCP.

정답: A,C

설명: (Fast2test 회원만 볼 수 있음)

문제8

Refer to the exhibit, which contains the output of the command diagnose vpn tunnel list.

What is the status of the tunnel?

A. Traffic is passing through the tunnel.

B. Phase 1 is down.

C. Phase 2 is down.

D. Both Phase 1 and Phase 2 were negotiated successfully.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제9

Which statement best describes the full state when forming an OSPF adjacency between two peers?

A. A primary and secondary relationship is negotiated.

B. The LSDBs on both routers are identical.

C. Communication is bi-directional between the two peers.

D. All LSA types have been received from the peer.

정답: B

문제10

What are two functions of automation stitches? (Choose two.)

A. You can configure automation stitches to execute actions sequentially by taking parameters from previous actions as input for the current action.

B. You can configure automation stitches on any FortiGate device in a Security Fabric environment.

C. You can set an automation stitch configured to execute actions in parallel to insert a specific delay between actions.

D. You can create automation stitches to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.

정답: A,D

설명: (Fast2test 회원만 볼 수 있음)

Fortinet FCSS - Network Security 7.4 Support Engineer - FCSS_NST_SE-7.4무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트