[2026] Fortinet FCSS - Network Security 7.6 Support Engineer

문제1

Refer to the exhibits,

which show the configuration on FortiGate and partial session information for internet traffic from a user on the internal network. If the priority on route ID 2 were changed from 10 to 0, what would happen to traffic matching that user session? (Choose one answer)

A. The session would remain in the session table, and its traffic would egress from port2.

B. The session would be deleted, and the client would need to start a new session.

C. The session would remain in the session table, and its traffic would egress from port1.

D. The session would remain in the session table, but its traffic would now egress from both port1 and port2.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제2

Refer to the exhibit, which shows the output of a BGP debug command.

What can you conclude about the router in this scenario?

A. All of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4.

B. The BGP session with peer 10.127.0.75 is up.

C. The router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the 8GP session with the local router.

D. An inbound route-map on local router is blocking the prefixes from neighbor 100.64.3.1.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제3

While troubleshooting a FortiGate web filter issue, users report that they cannot access any websites, even though those sites are not explicitly blocked by any web filter profiles that are applied to firewall policies.

What are the three most likely reasons for this behavior? (Choose three answers)

A. The DNS server is unreachable, preventing URL resolution.

B. The SSL/TLS deep inspection was configured but the browsers do not have the FortiGate certificate installed.

C. The webfilter-force-off setting has been enabled under config system fortiguard.

D. The web filter cache has been cleared causing all websites to take longer to be rated.

E. The FortiGuard Web Filtering license has expired, causing FortiGate to apply the default block action.

정답: A,B,E

설명: (Fast2test 회원만 볼 수 있음)

문제4

What is the diagnose test application ipsmonitor 5 command used for? (Choose one answer)

A. To restart all IPS engines and monitors

B. To provide information regarding IPS sessions

C. To enable IPS bypass mode

D. To disable the IPS engine

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제5

Refer to the exhibit.

A partial output from an IKE real-time debug is shown
The administrator does not have access to (he remote gateway
Based on the debug output, which two conclusions can you draw? (Choose two.)

A. There is a Diffie-Hellman group mismatch.

B. This is a phase2 negotiation

C. The remote peer is the initiating peer.

D. This is a phase1 negotiation.

정답: C,D

설명: (Fast2test 회원만 볼 수 있음)

문제6

What are two reasons you might see iprope_in check () check failed, drop when using the debug How?
(Choose two.)

A. The packet was dropped because it is not allowed by any firewall policy.

B. The packet was dropped because there is no route to the source.

C. The packet was dropped because the requested service is not enabled on FortiGate

D. The packet was dropped because the trusted host list is misconfigured

정답: C,D

설명: (Fast2test 회원만 볼 수 있음)

문제7

Refer to the exhibit, which shows the output of get router info bgp summary.

Which two statements are true? (Choose two.)

A. The local FortiGate has received 18 packets from a BGP neighbor.

B. The local ForliGate has received one prefix from BGP neighbor 100.64.1.254.

C. The local FortiGate is still calculating the prefixes received from BGP neighbor 100.64.2.264

D. The TCP connection with BGP neighbor 100.64.2.254 was successful.

정답: A,B

설명: (Fast2test 회원만 볼 수 있음)

Fortinet FCSS - Network Security 7.6 Support Engineer - FCSS_NST_SE-7.6무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트