Fortinet FCSS - Network Security 7.4 Support Engineer - FCSS_NST_SE-7.4 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which two statements about Security Fabric communications are true? (Choose two.)

A. FortiTelemetry and Neighbor Discovery both operate using TCP. B. The default port for Neighbor Discovery can be modified. C. By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013. D. FortiTelemetry must be manually enabled on the FortiGate interface.

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

Which authentication option can you not configure under config user radius on FortiOS?

A. mschap B. pap C. eap D. mschap2

Discussion 0

Correct Answer: C Vote an answer

Question 3

Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which action will FortiGate take when using the default settings for SSL certificate inspection?

A. FortiGate closes the connection because this represents an invalid SSL/TLS configuration. B. FortiGate uses the first entry listed in the SAN field in the server certificate. C. FortiGate uses the CNinformation from the Subjectfield in the server certificate. D. FortiGate uses the SNI from the user's web browser.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.

Based on the output, which two statements are correct? (Choose two.)

A. The npu_flagfor this tunnel is 02. B. Anti-replay is enabled. C. The npu_flagfor this tunnel is 03. D. Different SPI values are a result of auto-negotiationbeing disabled for phase 2 selectors.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

Refer to the exhibit, which shows the output of a session. Which two statements are true?
(Choose two.)

A. The session is being inspected using flow inspection. B. The TCP session has been successfully established. C. The session was initiated from an authenticated user. D. The session is being offloaded.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

Refer to the exhibit, which shows the partial output of a real-time OSPF debug.

Why are the two FortiGate devices unable to form an adjacency?

A. The two FortiGate devices attempting adjacency are in area 0.0.0.0. B. One FortiGate device is configured to require authentication, while the other is not. C. The Hello packet is being sent from an OSPF router with ID 0.0.0.112. D. The passwords on the FortiGate devices do not match.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).