Fortinet FCSS - Network Security 7.4 Support Engineer - FCSS_NST

QUESTION NO: 1
Refer to the exhibit, which shows the output of get router info ospf neighbor.

What can you conclude from the command output?

A. The network type connecting the local Fortigate and OSPF neighbor 0.0.0.10 is point-to-point. B. All neighbors are in area 0.0.0.0. C. The local FortiGate is not a DROther. D. The local FortiGate is the BDR.

Correct Answer: A

QUESTION NO: 2
Refer to the exhibit, which shows the output of diagnose automation test.

What can you observe from the output? (Choose two.)

A. The automation stitch test failed but the HA failover was successful. B. The automation stitch test is not being logged. C. An HA failover occurred. D. The test was unsuccessful.

Correct Answer: B,D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
Refer to the exhibit showing a debug output.

An administrator deployed FSSO in DC Agent Mode but FSSO is failing on FortiGate. Pinging FortiGate from where the collector agent is deployed is successful. The administrator then produces the debug output shown in the exhibit.
What could be causing this error message?

A. The TCP port 445 is blocked between FortiGate and collector agent. B. The FortiGate and the collector agent are using different TCP ports. C. The FortiGate cannot resolve the active directory server name. D. The collector agent preshared password is mismatched.

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
Refer to the exhibit, which shows the partial output of diagnose hardware sysinfo memory.

An administrator is troubleshooting a high memory issue.
Which two memory allocations can help the administrator pinpoint the issue? (Choose two.)

A. The 98908 kB of memory that will never be used. B. The I/O cache, which has 641364 kB of memory allocated to it. C. The user space, which has 708880 kB of physical memory that is not used by the system. D. The unused cache page, which is represented by the value indicated next to the Inactive heading.

Correct Answer: B,D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
The local OSPF router is unable to establish adjacency with a peer. Which two things should the administrator do to troubleshoot the issue? (Choose two.)

A. Check whether TCP port 179 is blocked. B. Check whether both peers have an IP address within the same subnet. C. Check if IP protocol 89 is blocked. D. Check if there is an active static route to the peer.

Correct Answer: B,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
Refer to the exhibits. An administrator Is expecting to receive advertised route 8.8.8.8/32 from FGT-A. On FGT-B, they confirm that the route is being advertised and received, however, the route is not being injected into the routing table. What is the most likely cause of this issue?

A. FGT-B is configured with a prefix list denying the 8.8.8.8/32 network to be injected into the routing table. B. A batter route to the 8.8.8.8/32 network exists in the routing table. C. The administrator has misconfigured redistribution of routes on FGT-A. D. FGT-8 is configured with a distribution list denying the 8.8.8.8/32 network to be injected into the routing table.

Correct Answer: A

Fortinet FCSS - Network Security 7.4 Support Engineer - FCSS_NST_SE-7.4 Exam Questions