Free Access Fortinet.FCSS_NST_SE-7.4.v2026-04-14.q68 Practice Test (Page 5)

Question 16

Which two statements about Security Fabric communications are true? (Choose two.)

A.By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.

B.FortiTelemetry and Neighbor Discovery both operate using TCP.

C.FortiTelemetry must be manually enabled on the FortiGate interface.

D.The default port for Neighbor Discovery can be modified.

Question 17

Refer to the exhibit, which a network topology and a partial routing table.

FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3.
Which changes must the administrator perform to ensure the server at 10.4.0.1/24 receives the echo reply from the laptop at 10.1.0.1/24?

A.Enable asymmetric routing under config system settings.

B.Change the configuration from strict RPF check mode to feasible RPF check mode.

C.A firewall policy that allows all ICMP traffic from port3 to port1.

D.Modify the default gateway on the laptop from 10.1.0.2 to 10.2.0.2.

Question 18

Refer to the exhibit, which shows the partial output of diagnose sys session stat.

An administrator has noticed unusual behavior from FortiGate. It appears that sessions are randomly removed.
Which two reasons could explain this? (Choose two.)

A.The FortiGate is dropping all TCP sessions with incomplete three-way handshakes.

B.The FortiGate is deleting sessions because the kernel cannot allocate more memory pages.

C.The FortiGate is flushing sessions because of high memory usage.

D.The FortiGate is not accepting sessions because the device has been down 16 out of 120 seconds.

Question 19

Exhibit.

Refer to the exhibit, which shows two entries that were generated in the FSSO collector agent logs.
What three conclusions can you draw from these log entries? {Choose three.)

A.The user's status shows as "not verified" in the collector agent.

B.DNS resolution is unable to resolve the workstation name.

C.A firewall is blocking traffic to port 139 and 445.

D.Remote registry is not running on the workstation.

E.The FortiGate firmware version is not compatible with that of the collector agent.

Question 20

View the exhibit:

Given the output showing a real-time debug, which statement describes why the update is failing?

A.The update should be using port 53 or port 8888, instead of port 443.

B.The administrator should use the execute update-wf command instead.

C.FortiGate is unable to establish a TCP connection with FDS.

D.FortiGate is unable to resolve the required FQDN (service.fortiguard.net) for antivirus and IPS updates.

Latest Upload: 110WGU.Health-Fitness-and-Wellness.v2026-10-21.q14; 121ISACA.COBIT-Design-and-Implementation.v2026-10-21.q57; 122NACE.NACE-CIP2-001.v2026-10-21.q36; 155Cisco.400-007.v2026-10-21.q176; 127F5.301a.v2026-10-21.q97; 144Oracle.1z0-1195-26.v2026-10-19.q18; 148Salesforce.Salesforce-Slack-Administrator.v2026-10-19.q126; 186Salesforce.JS-Dev-101.v2026-10-19.q106; 232PaloAltoNetworks.SSE-Engineer.v2026-10-17.q44; 401Cisco.300-420.v2026-10-17.q324

Question 16

Question 17

Question 18

Question 19

Question 20

Download PDF File