FCSS_NST_SE-7.4 Free Practice Test

Refer to the exhibit, which shows the output of a policy route table entry.

Which type of policy route does the output show?

1. A. An ISDB route
2. B. A regular policy route
3. C. A regular policy route, which is associated with an active static route in the FIB
4. D. AnSD-WAN rule

Correct Answer: A

Exhibit.

Refer to the exhibit, which contains a screenshot of some phase 1 settings.
The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

However, the IKE real-time debug does not show any output. Why?

1. A. The administrator must also run the command diagnose debug enable.
2. B. The debug shows only error message
3. C. If there is no output, then the phase 1 and phase 2 configurations match.
4. D. The log-filter setting is incorrec
5. E. The VPN traffic does not match this filter.
6. F. Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.

Correct Answer: A

Exhibit.

Refer to the exhibit, which shows two entries that were generated in theFSSO collectoragent logs.
What three conclusions can you draw from these log entries? {Choose three.)

1. A. Remote registry is not running on the workstation.
2. B. The user's status shows as "not verified" in the collector agent.
3. C. DNS resolution is unable to resolve the workstation name.
4. D. The FortiGate firmware version is not compatible with that of the collector agent.
5. E. A firewall is blocking traffic to port 139 and 445.

Correct Answer: ABE

Refer to the exhibit, which shows a partial output of the fssod daemon real-time debug command.

What two conclusions can you draw Itom the output? (Choose two.)

1. A. The workstation with IP 10.124.2.90 will be polled frequently using TCP port 445 to see if the user is still logged on.
2. B. The logon event can be seen on the collector agent installed on Windows.
3. C. FSSO is using DC agent mode to detect logon events.
4. D. FSSO is using agentless polling mode to detect logon events.

Correct Answer: AD

What are two reasons you might see iprope_in_check() check failed, drop when using the debug flow? (Choose two.)

1. A. Packet was dropped because of policy route misconfiguration.
2. B. Packet was dropped because of traffic shaping.
3. C. Trusted host list misconfiguration.
4. D. VIP or IP pool misconfiguration.

Correct Answer: CD