Fortinet FCSS_NST_SE-7.4 問題集

質問 1：
Refer to the exhibit, which shows a partial output of the fssod daemon real-time debug command.

What two conclusions can you draw Itom the output? (Choose two.)
A. The workstation with IP 10.124.2.90 will be polled frequently using TCP port 445 to see if the user is still logged on.
B. FSSO is using DC agent mode to detect logon events.
C. The logon event can be seen on the collector agent installed on Windows.
D. FSSO is using agentless polling mode to detect logon events.
正解：A,D

質問 2：
Refer to the exhibit, which shows partial outputs from two routing debug commands.

Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?
A. Set the priority of the static default route using port1 to 10.
B. Set the priority of the static default route using port2 to 1.
C. Set snat-route-change to enable.
D. Set preserve-session-route to enable.
正解：A

質問 3：
Exhibit.

Refer to the exhibit, which shows a partial web fillet profile configuration.
Which action does FortiGate lake if a user attempts to access www. dropbox. com, which is categorized as File Sharing and Storage?
A. FortiGate exempts the connection, based on the Web Content Filter configuration.
B. FortiGate blocks the connection, based on the FortiGuard category based filter configuration.
C. FortiGate allows the connection, based on the URL Filter configuration.
D. FortiGate blocks the connection as an invalid URL.
正解：B

質問 4：
Refer to the exhibit.
The exhibit shows the output from using the command diagnose debug application samld -1 to diagnose a SAML connection.

Based on this output, what can you conclude?
A. The IdP IP address is 10.1.10.254.
B. The authentication request is for an SSL VPN connection.
C. Active Directory is used for authentication.
D. The IdP IP address is 10.1.10.2.
正解：D

質問 5：
Refer to the exhibit, which shows the output of a policy route table entry.

Which type of policy route does the output show?
A. A regular policy route
B. An SD-WAN rule
C. A regular policy route, which is associated with an active static route in the FIB
D. An ISDB route
正解：D

質問 6：
Refer to the exhibit, which shows a partial output from the get router info routing-table database command.

The administrator wants to configure a default static route for port3 and assign a distance of 50 and a priority of 0.
What will happen to the port1 and port2 default static routes after the port3 default static route is created?
A. Both default static routes shown in the output will be injected into the FIB.
B. Neither of the routes shown in the output will be injected into the FIB.
C. The port2 default static route will be injected into the forwarding information base (FIB).
D. The port1 default static route will be injected into the FIB.
正解：C

質問 7：
In IKEv2, which exchange establishes the first CHILD_SA?
A. CREATE_CHILD_SA
B. IKE_Auth
C. INFORMATIONAL
D. IKE_SA_INIT
正解：A