Free Access Fortinet.FCSS_NST_SE-7.4.v2026-04-14.q68 Practice Test (Page 4)

Question 11

Refer to the exhibit.

Assuming a default configuration, which three statements are true? (Choose three.)

A.Strict RPF is enabled by default.

B.User C: Fail. There is no route to 10.0.4.63 using port1 in the touting table.

C.User A: Pass. The default static route through wan1 passes the RPF check regardless of the source IP address.

D.User B: Fail. There is no route to 95.56.234.24 using wan2 in the routing table.

E.User B: Pass. FortiGate will use asymmetric routing using wan1 to reply to traffic for 95.56.234.24.

Question 12

Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which action will FortiGate take when using the default settings for SSL certificate inspection?

A.FortiGate uses the SNI from the user's web browser.

B.FortiGate closes the connection because this represents an invalid SSL/TLS configuration.

C.FortiGate uses the first entry listed in the SAN field in the server certificate.

D.FortiGate uses the CNinformation from the Subjectfield in the server certificate.

Question 13

Refer to the exhibits. An administrator is attempting to advertise the network configured on port3.
However, FGT-A is not receiving the prefix.
Which two actions can the administrator take to fix this problem? (Choose two.)

A.Modify the prefix using the network command from 172.16.0.0/16 to 172.16.54.0/24.

B.Manually add the BGP route on FGT-A.

C.Restart BGP using a soft reset to force both peers to exchange their complete BGP routing tables.

D.Use the set network-import-check disable command.

Question 14

Refer to the exhibit, which shows the modified output of the routing kernel.

Which statement is true?

A.The egress interface associated with static route 8.8.8.8/32 is administratively up.

B.The default static route through 10.200.1.254 is not in the forwarding information base.

C.The default static route through port2 is in the forwarding information base.

D.The BGP route to 10.0.4.0/24 is not in the forwarding information base.

Question 15

During which phase of IKEv2 does the Diffie-Helman key exchange take place?

A.IKE_Req_INIT

B.Create_CHILD_SA

C.IKE_Auth

D.IKE_SA_INIT

Latest Upload: 129Oracle.1z0-1195-26.v2026-10-19.q18; 140Salesforce.Salesforce-Slack-Administrator.v2026-10-19.q126; 168Salesforce.JS-Dev-101.v2026-10-19.q106; 207PaloAltoNetworks.SSE-Engineer.v2026-10-17.q44; 395Cisco.300-420.v2026-10-17.q324; 229Salesforce.MCE-Con-201.v2026-10-15.q108; 220EMC.NCA.v2026-10-15.q25; 319Apple.Apple-Device-Support.v2026-10-15.q159; 235F5.F5CAB3.v2026-10-14.q47; 222Oracle.1Z0-1048-25.v2026-10-14.q67

Question 11

Question 12

Question 13

Question 14

Question 15

Download PDF File