FCSS_NST_SE-7.4 Free Practice Test

Refer to the exhibit, which shows a truncated output of a real-time LDAP debug.

What two conclusions can you draw from the output? (Choose two.)

1. A. The name of the configured LDAP server is Lab.
2. B. The user is authenticating using CN=John Smith.
3. C. FortiOS is able to locate the user in step 3 (Bind Request) of the LDAP authentication process.
4. D. FortiOS is performing the second step (Search Request) in the LDAP authentication process.

Correct Answer: BD

Which authentication option can you not configure under config user radius on FortiOS?

1. A. mschap
2. B. pap
3. C. mschap2
4. D. eap

Correct Answer: D

Refer to the exhibit, which shows the output of a BGP debug command.

Whatcan you conclude about the router in this scenario?

1. A. The router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the 8GP session with the local router.
2. B. An inbound route-map on local router is blocking the prefixes from neighbor 100.64.3.1.
3. C. All of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4.
4. D. The BGP session with peer 10.127.0.75 is up.

Correct Answer: D

In which two slates is a given session categorized as ephemeral? (Choose two.)

1. A. A UDP session with only one packet received
2. B. A UOP session with packets sent and received
3. C. A TCP session waiting for the SYN ACK
4. D. A TCP session waiting for FIN ACK

Correct Answer: AC

Exhibit.

Refer to the exhibit, which shows a FortiGate configuration.
An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator do to fix the issue?

1. A. Disable webfilter-force-off.
2. B. Increase webfilter-timeout.
3. C. Enable fortiguard-anycast.
4. D. Change protocol to TCP.

Correct Answer: A