Fortinet FCSS - Network Security 7.4 Support Engineer - FCSS_NST_SE-7.4 Free Exam Questions

A. 562 TCP sessions have their proto_stateset to 01if there is no inspection.

B. 113 sessions have been dropped because of memory page exhaustion.

C. 15 sessions have been categorized as ephemeral.

D. 27 sessions have expired but are still in the session table in case any out-of-order packets arrive.

A. Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.

B. The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.

C. The administrator must also run the command diagnose debug enable.

D. The log-filter setting is incorrect. The VPN traffic does not match this filter.

A. The workstation has come out of hibernate mode.

B. DNS cannot resolve the workstation name.

C. The collector agent is crashing.

D. Traffic to port 139 and 445 is blocked.

A. The IKE daemon crashed.

B. The encryption method is not supported on FGT-02.

C. Hardware offload is disabled on FGT-02.

D. A third-party device is blocking protocol 50.

A. The TCP connection with BGP neighbor 100.64.2.254 was successful.

B. The local FortiGate is still calculating the prefixes received from BGP neighbor 100.64.2.264

C. The local ForliGate has received one prefix from BGP neighbor 100.64.1.254.

D. The local FortiGate has received 18 packets from a BGP neighbor.

A. diagnose application timestamp enable

B. diagnose debug console timestamp enable

C. diagnose timestamp enable

D. diagnose debug application timestamp enable

A. Check whether both peers have an IP address within the same subnet.

B. Check if IP protocol 89 is blocked.

C. Check whether TCP port 179 is blocked.

D. Check if there is an active static route to the peer.

A. None of the three neighbors have successfully established the TCP three-way handshake with the local router.

B. The router 100.64.3.1needs to update the local AS number to 65060to become adjacent with the local router.

C. The RIB-OUT configuration for router 10.127.0.75prevents any route advertisement to the local router.

D. The local router is waiting for the keepalive message from the router 10.125.0.60.

A. 208.91.112.194

B. 209.22.147.36

C. 64.26.151.37

D. 66.117.56.37

A. The local router will never be elected DR.

B. The local router will be elected DR only if re-election occurs and its router ID is highest, assuming equal priority.

C. Both the DR and BDR will have to fail before the local router will be elected DR.

D. The local router will be elected DR if the current DR fails because it has a higher router ID than the BDR.