Online Access Free FCSS_NST_SE-7.4 Practice Test

Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network.


An administrator would like to lest session failover between the two service provider connections.
Which two changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)

• A.Configure unset snap-route-changeto return it to the default setting.
• B.Change the priority of the port1static route to 11.
• C.Change the priority of the port2static route to 5.
• D.Configure set snat-route-change enable.

For IKEv2, which combination of payloads can INFORMATIONAL exchanges contain?

• A.Create, Remove, and Wait
• B.Initiator, Responder, and Wait
• C.Start, Wait, and Delete
• D.Notify, Delete, and Configuration

Refer to the exhibit, which shows a partial web filter profile configuration.

The URL www.dropbox.com is categorized as File Sharing and Storage. Which action does FortiGate take if a user attempts to access www.dropbox.com?

• A.Based on the URL Filter configuration, FortiGate allows the connection.
• B.FortiGate blocks the connection, based on the FortiGuard category-based filter configuration.
• C.Based on the Web Content filter configuration, access to www.dropbox.com would be exempted.
• D.FortiGate blocks the connection as an invalid URL.

Refer to the exhibit, which contains partial output from an IKE real-time debug.

The administrator does not have access to the remote gateway. Based on the debug output, which configuration change the administrator make to the local gateway to resolve the phase 1 negotiation error?

• A.In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.
• B.In the phase 1 network configuration, set the IKE version to 2.
• C.In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.
• D.In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.

In the SAML negotiation process, which section does the Identity Provider (IdP) provide the SAML attributes utilized in the authentication process to the Service Provider (SP)?

• A.Authentication Request
• B.Authentication Response
• C.Assertion dump
• D.SP Login dump