Online Access Free FCSS_NST_SE-7.6 Practice Test

Refer to the exhibit, which shows a partial web filter profile configuration.

The URL www.dropbox.com is categorized as File Sharing and Storage.
Which action does FortiGate take if a user attempts to access www.dropbox.com?

• A.Based on the Web Content filter configuration, access to www.dropbox.com would be exempted.
• B.Based on the URL Filter configuration, FortiGate allows the connection.
• C.FortiGate blocks the connection as an invalid URL.
• D.FortiGate blocks the connection, based on the FortiGuard category-based filter configuration.

Exhibit.

Refer to the exhibit, which contains a screenshot of some phase 1 settings.
The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

However, the IKE real-time debug does not show any output. Why?

• A.The log-filter setting is incorrect. The VPN traffic does not match this filter.
• B.Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.
• C.The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.
• D.The administrator must also run the command diagnose debug enable.

Refer to the exhibit.

The exhibit shows a session entry. Which statement about this TCP session is true?

• A.The session will expire in one second.
• B.The session is offloaded using NPU.
• C.It is a TCP session from 10.9.31.117 to 10.1.0.3.
• D.Return traffic to the initiator is sent to 10.9.31.117.

The output of a policy route table entry is shown.
Which type of policy route does the output show?

• A.A regular policy route, which is not associated with an active static route in the FIB
• B.A regular policy route, which is associated with an active static route in the FIB
• C.An ISDB route
• D.An SD-WAN rule

Refer to the exhibit.

The sniffer log on two FortiGate devices are shown. Based on the information in the log, which two factors explain the output on FortiGate FGT-02? (Choose two answers)

• A.The administrator configured the wrong remote peer IP address on FGT-01.
• B.The administrator has not yet configured the VPN tunnel on FGT-02.
• C.A third-party device is blocking protocol 50.
• D.The administrator set the wrong sniffer filter on FGT-02.