FCSS_NST_SE-7.4 Free Practice Test

Refer to the exhibit, which shows a session entry.

Which statement about this session is true?

1. A. Return traffic to the initiator is sent to 10.1.0.1.
2. B. Return traffic to the initiator is sent lo 10.200.1.254.
3. C. It is an ICMP session from 10.1.10.10 to 10.200.1.1.
4. D. It is an ICMP session from 10.1.10.1 to 10.200.5.1.

Correct Answer: D

Refer to the exhibit, which contains the output ofdiagnose vpn tunnellist.

Which command will capture ESP traffic for the VPN named DialUp_0?

1. A. diagnose sniffer packet any 'ip proto 50'
2. B. diagnose sniffer packet any 'host 10.0.10.10'
3. C. diagnose sniffer packet any 'esp and host 10.200.3.2'
4. D. diagnose sniffer packet any 'port 4500'

Correct Answer: D

Which statement about IKEv2 is true?

1. A. Both IKEv1and IKEv2 share the feature of asymmetric authentication.
2. B. IKEv1and IKEv2 have enough of the header format in common that both versions can run over the same UDP port.
3. C. IKEv1and IKEv2 use same TCP port but run on different UDP ports.
4. D. IKEv1and IKEv2 share the concept of phase1and phase2.

Correct Answer: B

Refer to the exhibit.

Assuming a default configuration, which three statements are true? (Choose three.)

1. A. Strict RPF is enabled by default.
2. B. User B: Fai
3. C. There is no route to 95.56.234.24 using wan2 in the routing table.
4. D. User A: Pas
5. E. The default static route through wan1 passes the RPF check regardless of the source IP address.
6. F. User B: Pas
7. G. FortiGate will use asymmetric routing using wan1 to reply to traffic for 95.56.234.24.
8. H. User C: Fai
9. I. There is no route to 10.0.4.63 using port1 in the touting table.

Correct Answer: BDE

Refer to the exhibit, which shows the omitted output of a session table entry.

Which two statements are true? (Choose two.)

1. A. The traffic has been tagged for VLAN 0000.
2. B. NP7 is handling offloading of this session.
3. C. The traffic matches Policy ID 1.
4. D. The session has been offloaded.

Correct Answer: BD