Fortinet FCSS_NST_SE-7.4 問題集

質問 1：
Refer to the exhibit, which shows the output of the get router info bgp summary command.

Which statement regarding adjacencies between the local router and its neighbors is correct?
A. The local router and neighbor 100.64.2.254are unable to establish adjacency because AS 100 is already used by neighbor 100.64.1.254.
B. The local router and neighbor 100.64.2.254are unable to establish adjacency because the TCP session could not be established.
C. The local router and neighbor 100.64.1.254established adjacency because their BGP table versions are identical.
D. The local router and neighbor 100.64.2.254are unable to establish adjacency because their BGP table versions are different.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Refer to the exhibit, which shows the partial output of FortiOS kernel slabs.

Which statement is true?
A. The total slab size of the ip6_session slab is 1300 kB and is associated with the kernel.
B. The total slab size of the sctp_session slab is 0 kB and is associated with the user space.
C. The total slab size of the ip_session slab is 3600 kB and is associated with the user space.
D. The total slab size of the tcp_session slab is 7500 kB and is associated with the kernel.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which two statements are true regarding heartbeat messages sent from an FSSO collector agent to FortiGate? (Choose two.)
A. The heartbeat messages can be seen on FortiGate using the real-lime FSSO debug.
B. The heartbeat messages can be seen using the command diagnose debug authd fsso list.
C. The heartbeat messages must be manually enabled on FortiGate.
D. The heartbeat messages can be seen in the collector agent logs.
正解：A,D

質問 4：
Refer to the exhibit, which shows a partial web fillet profile configuration. Which action does FortiGate lake if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?

A. FortiGate exempts the connection, based on the Web Content Filter configuration.
B. FortiGate blocks the connection, based on the FortiGuard category based filter configuration.
C. FortiGate allows the connection, based on the URL Filter configuration.
D. FortiGate blocks the connection as an invalid URL.
正解：B

質問 5：
Refer to the exhibit, which shows a truncated output of a real-time LDAP debug.

What two conclusions can you draw from the output? (Choose two.)
A. The user is authenticating using CN=John Smith.
B. FortiOS is performing the second step (Search Request) in the LDAP authentication process.
C. The name of the configured LDAP server is Lab.
D. FortiOS is able to locate the user in step 3 (Bind Request) of the LDAP authentication process.
正解：A,B

質問 6：
Which three steps does FortiGate execute using the pull method to get antivirus and IPS updates? (Choose three.)
A. FortiGate registers its public IP address in FortiGuard.
B. FortiGate gets a list of server IP addresses that it can contact.
C. FortiGate contacts a DNS server to resolve the FortiGuard domain name.
D. FortiGate starts sending rating queries to one of the servers in the list.
E. FortiGate periodically queries for pending updates.
正解：B,C,E

質問 7：
Refer to the exhibit, which shows the output of get router info ospf neighbor.

What can you conclude from the command output?
A. The local FortiGate is not a DROther.
B. All neighbors are in area 0.0.0.0.
C. The local FortiGate is the BDR.
D. The network type connecting the local Fortigate and OSPF neighbor 0.0.0.10 is point-to-point.
正解：D

質問 8：
Refer to the exhibit, which shows the partial output of a diagnose command.

Which two conclusions can you draw from the output shown in the exhibit? (Choose two.)
A. The session is checked against firewall policy ID 25.
B. This is a pinhole session to allow traffic for a TCP protocol that dynamically assigns TCP ports.
C. FortiGate will drop the expected traffic if it does not arrive within 23 seconds.
D. Clearing the master session has no impact on the expectation session.
正解：B,C
解説: (Topexam メンバーにのみ表示されます)

質問 9：
In the SAML negotiation process, which section does the Identity Provider (IdP) provide the SAML attributes utilized in the authentication process to the Service Provider (SP)?
A. Authentication Response
B. Assertion dump
C. Authentication Request
D. SP Login dump
正解：B
解説: (Topexam メンバーにのみ表示されます)