FCSS_NST_SE-7.4問題集、Fortinet実際の試験問題

質問 1

In IKEv2, which exchange establishes the first CHILD_SA?

A. IKE_SA_INIT

B. IKE_Auth

C. INFORMATIONAL

D. CREATE_CHILD_SA

正解: D

質問 2

Which exchanges are the first two exchanges in IKEv2 negotiation?

A. IKE SA_INIT and IKE_Auth

B. INIT_Req and Auth_Request

C. Key Exchange and Authentication

D. Init_Req and Wait_Init_Req

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 3

Refer to the exhibit, which shows the output of a diagnose command. What can you conclude about the debug output in this scenario?

A. Servers with a negative TZ value are less preferred for rating requests.

B. FortiGate used 64.26.151.37 as the initial server to validate its contract.

C. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.

D. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.

正解: D

質問 4

View the exhibit:

Given the output showing a real-time debug, which statement describes why the update is failing?

A. FortiGate is unable to establish a TCP connection with FDS.

B. FortiGate is unable to resolve the required FQDN (service.fortiguard.net) for antivirus and IPS updates.

C. The update should be using port 53 or port 8888, instead of port 443.

D. The administrator should use the execute update-wf command instead.

正解: A

質問 5

Which statement about parallel path processing is correct (PPP)?

A. PPP chooses from a group of parallel options lo identity the optimal path tor processing a packet.

B. PPP does not apply to packets that are part of an already established session.

C. Software configuration has no impact on PPP.

D. Only FortiGate hardware configurations affect the path that a packet takes.

正解: A

質問 6

Refer to the exhibit, which shows one way communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.

What three actions must you take to ensure successful communication? (Choose three.)

A. Ensure the port for Neighbor Discovery has been changed.

B. FortiGate must not be in NAT mode.

C. You must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.

D. You must authorize the downstream FortiGate on the root FortiGate.

E. Ensure TCP port 8013 is not blocked along the way.

正解: C,D,E

解説: (PassTest メンバーにのみ表示されます)

質問 7

Refer to the exhibit, which shows the output of a BGP debug command.

Why has the local router at 172.16.23.58 been unable to establish adjacency with its only neighbor?

A. There is no active route to the BGP neighbor.

B. The local router has not received an OPENmessage from the neighbor.

C. The local router has not received a SYN/ACKpacket from the neighbor.

D. The local router has not received a keepalivemessage from the neighbor.

正解: C

解説: (PassTest メンバーにのみ表示されます)

Fortinet FCSS - Network Security 7.4 Support Engineer - FCSS_NST_SE-7.4 模擬練習