Fortinet FCSS_NST_SE-7.4 問題集

質問 1：
Exhibit.

Refer to the exhibit, which shows a partial output of diagnose hardware aysinfo memory.
Which two statements about the output are true? (Choose two.)
A. The user space has 708880 kB of physical memory that is not used by the system.
B. The value indicated next to the inactive heading represents the currently unused cache page.
C. There are 98908 kB o! memory that will never be used.
D. The I/O cache, which has 641364 kB of memory allocated to it.
正解：B,C

質問 2：
Exhibit.

Refer to the exhibit, which contains a screenshot of some phase 1 settings.
The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

However, the IKE real-time debug does not show any output. Why?
A. Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.
B. The administrator must also run the command diagnose debug enable.
C. The log-filter setting is incorrect. The VPN traffic does not match this filter.
D. The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.
正解：B

質問 3：
Refer to the exhibit, which shows the output of get router info ospf neighbor.

What can you conclude from the command output?
A. The local FortiGate is not a DROther.
B. All neighbors are in area 0.0.0.0.
C. The local FortiGate is the BDR.
D. The network type connecting the local Fortigate and OSPF neighbor 0.0.0.10 is point-to-point.
正解：D

質問 4：
Refer to the exhibit.

Which three pieces of information does the diagnose sys top command provide? (Choose three.)
A. The miglogd daemon would be on top of the list, if the administrator pressed m on the keyboard.
B. If the neweli daemon continues to be in the R state, it will need to be manually restarted.
C. The cmdbsvr process is occupying 2.4% of the total user memory space.
D. The miglogd daemon is running on CPU core ID 0.
E. The diagnose sys top command has been running for 18 minutes.
正解：A,C,D

質問 5：
Exhibit.

Refer to the exhibit, which contains partial output from an IKE real-time debug.
Which two statements about this debug output are correct? (Choose two.)
A. The local gateway IP address is 10.0.0.1.
B. Perfect Forward Secrecy (PFS) is enabled in the configuration.
C. The initiator provided remote as its IPsec peer ID.
D. It shows a phase 2 negotiation.
正解：C,D

質問 6：
Refer to the exhibit, which shows a partial output of the fssod daemon real-time debug command.

What two conclusions can you draw Itom the output? (Choose two.)
A. The workstation with IP 10.124.2.90 will be polled frequently using TCP port 445 to see if the user is still logged on.
B. FSSO is using DC agent mode to detect logon events.
C. The logon event can be seen on the collector agent installed on Windows.
D. FSSO is using agentless polling mode to detect logon events.
正解：A,D

質問 7：
Refer to the exhibit, which shows the partial output of a diagnose command.

Which two conclusions can you draw from the output shown in the exhibit? (Choose two.)
A. The session is checked against firewall policy ID 25.
B. This is a pinhole session to allow traffic for a TCP protocol that dynamically assigns TCP ports.
C. FortiGate will drop the expected traffic if it does not arrive within 23 seconds.
D. Clearing the master session has no impact on the expectation session.
正解：B,C