Online Access Free FCSS_EFW_AD-7.6 Practice Test

Refer to the exhibit.

A LAN interface connected from FortiGate to two FortiSwitch devices is shown.
Which two statements about the LAN interface connection shown in the exhibit are correct?
(Choose two.)

• A.You must enable Spanning Tree Protocol (STP) or Rapid STP (RSTP) on FortiGate and FortiSwitch to avoid layer 2 loopbacks.
• B.The connection is using a FortiLink interface.
• C.FortiGate is using an SD-WAN-type interface to connect to one FortiSwitch device with MCLAG.
• D.The LAN interface must use an 802.3ad type interface.

Refer to the exhibit, which shows an OSPF network.

Which configuration must the administrator apply to optimize the OSPF database?

• A.Set the area 0.0.0.1 to the type NSSA in the area border FortiGate.
• B.Set the area 0.0.0.1 to the type STUB in the area border FortiGate.
• C.Set an access list in the AS boundary FortiGate.
• D.Set a route map in the AS boundary FortiGate.

An organization's guest internet policy, operating in proxy mode, blocks access to artificial intelligence technology sites using FortiGuard.
However, a guest user accessed a page in this category using port 8443.
Which configuration change must you make for FortiGate to analyze HTTPS traffic on nonstandard ports like 8443, when full SSL inspection is active in the guest policy?

• A.Block traffic on nonstandard ports by enabling server certificate SNI check in the SSLISSH inspection profile.
• B.Enter 443, 8443 to analyze both standard (443) and non-standard (8443) HTTPS ports in the protocol port mapping section of the SSL/SSH Inspection profile.
• C.Block untrusted SSL certificates in the SSL/SSH inspection profile.
• D.Enable network protocol enforcement for port 8443 with the protocol HTTPS in FortiGuard application control.

Which parameter should be configured to scale iBGP sessions?

• A.route-reflector-client
• B.recursive-next-hop
• C.neighbor-range
• D.neighbor-group

Which two recommendations prevent invalid paths when using zero phase 2 selectors?

• A.Routing protocols
• B.Assign tunnel IP
• C.Exact selectors
• D.Aggregate IPsec