FCSS_NST_SE-7.4 Free Practice Test

An administrator wants to capture encrypted phase 2 traffic between two FotiGate devices using the built-in sniffer.
If the administrator knows that there Is no NAT device located between both FortiGate devices, which command should the administrator run?

1. A. diagnose sniffer packet any 'udp port 500'
2. B. diagnose sniffer packet any 'lp proto 50'
3. C. diagnose sniffer packet any 'udp port 4500'
4. D. diagnose sniffer packet any 'ah'

Correct Answer: B

Which two statements about conserve mode are true? (Choose two.)

1. A. FortiGate enters conserve mode when the system memory reaches the configured extreme threshold.
2. B. FortiGate starts taking the configured action for new sessions requiring content inspection when the system memory reaches the configured red threshold.
3. C. FortiGate exits conserve mode when the system memory goes below the configured green threshold.
4. D. FortiGate starts dropping all new sessions when the system memory reaches the configured red threshold.

Correct Answer: BC

Refer to the exhibit, which contains the output ofdiagnose vpn tunnellist.

Which command will capture ESP traffic for the VPN named DialUp_0?

1. A. diagnose sniffer packet any 'ip proto 50'
2. B. diagnose sniffer packet any 'host 10.0.10.10'
3. C. diagnose sniffer packet any 'esp and host 10.200.3.2'
4. D. diagnose sniffer packet any 'port 4500'

Correct Answer: D

Refer to the exhibit, which shows partial outputs from two routing debug commands.

Which change must an administrator make on FortiGate to route web traffic from internal
users to the internet, using ECMP?

1. A. Set snat-route-change to enable.
2. B. Set the priority of the static default route using port2 to 1.
3. C. Set preserve-session-route to enable.
4. D. Set the priority of the static default route using port1 to 10.

Correct Answer: D