Online Access Free FCSS_EFW_AD-7.6 Practice Test

You are using Virtual eXtensible LAN (VXLAN) extensively on FortiGate. Which specialized acceleration hardware must you use to improve FortiGate performance? (Choose one answer)

• A.NP7
• B.NTurbo
• C.SP5
• D.##9

Refer to the exhibit, which shows an enterprise network connected to an internet service provider.

An administrator must configure a loopback as a BGP source to connect to the ISP.
Which two commands are required to establish the connection? (Choose two.)

• A.recursive-next-hop
• B.update-source
• C.ebgp-enforce-multihop
• D.ibgp-enforce-multihop

Refer to the exhibit.
A physical topology along with a traffic log is shown. You are using FortiAnalyzer to monitor traffic from the device with IP address 10.0.2.51, which is located behind the FortiGate internal segmentation firewall (ISFW) device. Unified threat management (UTM) is not enabled in the firewall policy on the HQ-ISFW device, and you are surprised to see a log with the action Malware, as shown in the exhibit. What are two reasons why FortiAnalyzer would display this log? (Choose two answers)

• A.HQ-ISFW is not connected to FortiAnalyzer and traffic must go through HQ-NGFW-1.
• B.Security rating is enabled in HQ-ISFW.
• C.UTM is enabled in the firewall policy in HQ-NGFW-1.
• D.HQ-ISFW is in a Security Fabric environment.

What is the effect of configuring tcp-mss-sender and tcp-mss-receiver?

• A.Largest payload
• B.Fragment only
• C.Header change
• D.Allow/Deny

Which two statements about IKEv2 are true if an administrator decides to implement IKEv2 in the VPN topology? (Choose two.)

• A.It supports the extensible authentication protocol (EAP).
• B.It supports interoperability with devices using IKEv1.
• C.It includes stronger Diffie-Hellman (DH) groups, such as Elliptic Curve (ECP) groups.
• D.It exchanges a minimum of two messages to establish a secure tunnel.