Online Access Free FCSS_NST_SE-7.6 Practice Test

Refer to the exhibit.

Partial output of the fssod daemon real-time debug command is shown. Which two conclusions can you draw from the output? (Choose two answers)

• A.FSSO is using agentless polling mode to detect logon events.
• B.FortiGate polled this event through TCP port 8000.
• C.FSSO cannot verify if the user is still logged in.
• D.Fortinet Single Sign-On (FSSO) is using DC Agent mode to detect logon events.
• E.FortiGate is frequently polling the workstation in case the user has logged out.

Refer to the exhibit, which shows a partial output of the fssod daemon real-time debug command.

What two conclusions can you draw from the output? (Choose two.)

• A.FSSO is using agentless polling mode to detect logon events.
• B.The logon event can be seen on the collector agent installed on Windows.
• C.The workstation with IP 10.124.2.90 will be polled frequently using TCP port 445 to see if the user is still logged on.
• D.FSSO is using DC agent mode to detect logon events.

Refer to the exhibit, which shows the output of get router info ospf neighbor.

What can you conclude from the command output?

• A.All neighbors are in area 0.0.0.0.
• B.The local FortiGate is not a DROther.
• C.The local FortiGate is the BDR.
• D.The network type connecting the local Fortigate and OSPF neighbor 0.0.0.10 is point-to-point.

Exhibit.

Refer to the exhibit, which shows a partial web fillet profile configuration.
Which action does FortiGate lake if a user attempts to access www. dropbox. com, which is categorized as File Sharing and Storage?

• A.FortiGate exempts the connection, based on the Web Content Filter configuration.
• B.FortiGate blocks the connection as an invalid URL.
• C.FortiGate blocks the connection, based on the FortiGuard category based filter configuration.
• D.FortiGate allows the connection, based on the URL Filter configuration.

Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which two actions will FortiGate take when using the default settings for SSL certificate inspection? (Choose two answers)

• A.FortiGate uses the CN information from the Subject field in the server certificate.
• B.FortiGate does not decrypt the traffic if the traffic is allowed by the web filter profile.
• C.FortiGate uses the SNI from the user ' s web browser.
• D.FortiGate does not decrypt the traffic if the traffic is blocked by the web filter profile.