FCSS_NST_SE-7.4 Fortinet Exam Questions and Free Practice Test

Question 7

Exhibit.
FCSS_NST_SE-7.4 dumps exhibit
Refer to the exhibit, which shows a FortiGate configuration.
An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator do to fix the issue?

A. Disable webfilter-force-off.

B. Increase webfilter-timeout.

C. Enable fortiguard-anycast.

D. Change protocol to TCP.

Correct Answer:A

Question 8

Refer to the exhibit.
FCSS_NST_SE-7.4 dumps exhibit
Assuming a default configuration, which three statements are true? (Choose three.)

A. Strict RPF is enabled by default.

B. User B: Fai

C. There is no route to 95.56.234.24 using wan2 in the routing table.

D. User A: Pas

E. The default static route through wan1 passes the RPF check regardless of the source IP address.

F. User B: Pas

G. FortiGate will use asymmetric routing using wan1 to reply to traffic for 95.56.234.24.

H. User C: Fai

I. There is no route to 10.0.4.63 using port1 in the touting table.

Correct Answer:BDE

Question 9

Exhibit.
FCSS_NST_SE-7.4 dumps exhibit
Refer to the exhibit, which contains partial output from an IKE real-time debug. Which two statements about this debug output are correct? (Choose two.)

A. Perfect Forward Secrecy (PFS) is enabled in the configuration.

B. The local gateway IP address is 10.0.0.1.

C. It shows a phase 2 negotiation.

D. The initiator provided remote as its IPsec peer ID.

Correct Answer:CD

Question 10

Refer to the exhibit,which shows the output of getrouter info ospf neighbor.
FCSS_NST_SE-7.4 dumps exhibit
What can you conclude from the command output?

A. The network type connecting the local Fortigate and OSPF neighbor 0.0.0.10 is point-to- point.

B. All neighbors are in area 0.0.0.0.

C. The local FortiGate is the BDR.

D. The local FortiGate is not a DROther.

Correct Answer:A

Question 11

Refer to the exhibit, which shows the omitted output of a session table entry.
FCSS_NST_SE-7.4 dumps exhibit
Which two statements are true? (Choose two.)

A. The traffic has been tagged for VLAN 0000.

B. NP7 is handling offloading of this session.

C. The traffic matches Policy ID 1.

D. The session has been offloaded.

Correct Answer:BD

Question 12

Refer to the exhibit, which shows the output of a policy route table entry.
FCSS_NST_SE-7.4 dumps exhibit
Which type of policy route does the output show?

A. An ISDB route

B. A regular policy route

C. A regular policy route, which is associated with an active static route in the FIB

D. AnSD-WAN rule

Correct Answer:A

START FCSS_NST_SE-7.4 EXAM