Online Access Free FCSS_NST_SE-7.4 Practice Test

Refer to the exhibit, which contains the output of the command diagnose vpn tunnel list.

Reviewing the debug command, what is the current status of the traffic flowing through the tunnel?

• A.Traffic is flowing with an asymmetric selector.
• B.The outbound IPsec SA was copied to the NPU.
• C.There is an unsupported cipher or HMAC
• D.The inbound IPsec SA was copied to the NPU.

An administrator wants to capture encrypted phase 2 traffic between two FotiGate devices using the built-in sniffer.
If the administrator knows that there is no NAT device located between both FortiGate devices, which command should the administrator run?

• A.diagnose sniffer packet any 'lp proto 50'
• B.diagnose sniffer packet any 'udp port 500'
• C.diagnose sniffer packet any 'udp port 4500'
• D.diagnose sniffer packet any 'ah'

Refer to the exhibit, which shows the output of diagnose sys session list.

If the HA ID for the primary device is 0, what happens if the primary fails and the secondary becomes the primary?

• A.The secondary device has this session synchronized; however, because application control is applied, the session is marked dirty and has to be re-evaluated after failover.
• B.The session state is preserved but the kernel will need to re-evaluate the session because NAT was applied.
• C.Traffic for this session continues to be permitted on the new primary device after failover, without requiring the client to restart the session with the server.
• D.The session will be removed from the session table of the secondary device because of the presence of allowed error packets, which will force the client to restart the session with the server.

Refer to the exhibit, which shows the partial output of diagnose hardware sysinfo memory.

An administrator is troubleshooting a high memory issue.
Which two memory allocations can help the administrator pinpoint the issue? (Choose two.)

• A.The unused cache page, which is represented by the value indicated next to the Inactive heading.
• B.The user space, which has 708880 kB of physical memory that is not used by the system.
• C.The I/O cache, which has 641364 kB of memory allocated to it.
• D.The 98908 kB of memory that will never be used.

Refer to the exhibit. FortiGate is in conserve mode as shown in the Event logs.
Based on the information shown in the exhibit, what can you conclude about the FortiGate intrusion prevention system (IPS) configuration?

• A.IPS fail open mode is disabled.
• B.The inspected protocol is not supported.
• C.New packets might pass through without inspection.
• D.The IPS profile is proxy based.