Fortinet FCSS_NST_SE-7.4 問題集

質問 1：
Which command do you use to enable a timestamp in a real-time debug?
A. diagnose debug application timestamp enable
B. diagnose debug console timestamp enable
C. diagnose application timestamp enable
D. diagnose timestamp enable
正解：B

質問 2：
In an FSSO environment, a user is listed as active on FortiGate but cannot browse the internet.
Which factor do you not need to verify as a potential problem?
A. The connectivity between the collector agent and FortiGate
B. Whether there is a valid firewall policy
C. That the user's IP address is in the list of active FSSO users
D. The user's group information
正解：A

質問 3：
Refer to the exhibit, which contains the output of the command diagnose vpn tunnel list.

Reviewing the debug command, what is the current status of the traffic flowing through the tunnel?
A. There is an unsupported cipher or HMAC
B. The outbound IPsec SA was copied to the NPU.
C. Traffic is flowing with an asymmetric selector.
D. The inbound IPsec SA was copied to the NPU.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Refer to the exhibit, which shows the output of a debug command.

What needs to happen for the local router to be elected DR?
A. The local router will be elected DR only if re-election occurs and its router ID is highest, assuming equal priority.
B. Both the DR and BDR will have to fail before the local router will be elected DR.
C. The local router will be elected DR if the current DR fails because it has a higher router ID than the BDR.
D. The local router will never be elected DR.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Refer to the exhibits, which contain the partial configurations of two VPNs on FortiGate.

An administrator has configured two VPNs for two different user groups. Users who are in the Users- 2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovers that FortiGate is not matching the user-2 VPN for members of the Users-
2 group. Which two changes must the administrator make to fix the issue? (Choose two.)
A. Set up specific peer IDs on both VPNs.
B. Enable XAuth on both VPNs.
C. Use different pre-shared keys on both VPNs.
D. Change to aggressive mode on both VPNs.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Refer to the exhibit, which shows one way communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.

What three actions must you take to ensure successful communication? (Choose three.)
A. Ensure TCP port 8013 is not blocked along the way.
B. You must authorize the downstream FortiGate on the root FortiGate.
C. You must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.
D. Ensure the port for Neighbor Discovery has been changed.
E. FortiGate must not be in NAT mode.
正解：A,B,C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Refer to the exhibit, which shows a partial output of diagnose npu np6 port-liston FortiGate 2000E.

An administrator is unable to analyze traffic flowing between port1 and port17 using the diagnose sniffercommand.
Which two commands allow the administrator to view the traffic? (Choose two.) config firewall policy
A. edit 17
set auto-asic-offload disable
end
config system npu
B. set fastpath disable
end
diagnose npu np6 port-list disable 5 17
C. diagnose npu np6 fastpath disable 1
D. edit 5
set auto-asic-offload disable
end
next
正解：B,C
解説: (Topexam メンバーにのみ表示されます)