FCSS_NST_SE-7.4試験無料問題集（104題）「Fortinet FCSS - Network Security 7.4 Support Engineer 認定」

出題：1

Refer to the exhibit, which shows the sniffer log on two FortiGate devices.

The IPsec tunnel is up on both ends of the tunnel, but traffic is not flowing.
Based on the information in the log, which scenario explains the output on FortiGate FGT-02?

A. A third-party device is blocking protocol 50.

B. Hardware offload is disabled on FGT-02.

C. The IKE daemon crashed.

D. The encryption method is not supported on FGT-02.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Refer to the exhibit, which contains partial output from an IKE real-time debug.

The administrator does not have access to the remote gateway. Based on the debug output, which configuration change the administrator make to the local gateway to resolve the phase 1 negotiation error?

A. In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.

B. In the phase 1 network configuration, set the IKE version to 2.

C. In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.

D. In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Refer to the exhibit, which shows a session table entry.

Which statement about FortiGate behavior relating to this session is correct?

A. FortiGate applied only IPS inspection to this session.

B. FortiGate forwarded this session without any inspection.

C. FortiGate is performing a security profile inspection using the CPU.

D. FortiGate redirected the client to the captive portal to authenticate, so that a correct policy match could be made.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which three conditions would prevent a static route from being used by the kernel to route traffic?
(Choose three.)

A. There is another route to the same destination, with a higher distance.

B. The interface specified in the route configuration is down.

C. The next-hop IP address is unreachable and health monitor is configured.

D. There is another route to the same destination, with a lower distance.

E. The route has a lower metric than another route to the same destination.

正解：B,C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

What are two reasons that an OSPF router does not have any type 5 link-state advertisements (LSAs) in its link-state database (LSDB)? (Choose two.)

A. The peer of the local router is using a prefix-list-outconfiguration to prevent all type 5 LSAs to be advertised.

B. There is no autonomous system border router (ASBR) in the network.

C. The local router is located in a stub area.

D. IP protocol 89 is blocked between the local router and its peer.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which command do you use to enable a timestamp in a real-time debug?

A. diagnose debug application timestamp enable

B. diagnose application timestamp enable

C. diagnose debug console timestamp enable

D. diagnose timestamp enable

正解：C 解答を投票する

FCSS_NST_SE-7.4試験無料問題集「Fortinet FCSS - Network Security 7.4 Support Engineer 認定」