Fortinet FCSS - Network Security 7.6 Support Engineer - FCSS_NST

QUESTION NO: 1
Refer to the exhibit, which shows the output of a real-time debug. Which statement about this output is true?
(Choose one answer)

A. FortiGate found the requested URL in its local cache. B. This web request was inspected using the ftgd-allow web filter profile. C. The server hostname was extracted from the SNI in the client request, or from the CN in the server certificate. D. The requested URL belongs to category ID 255.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Refer to the exhibit, which shows the modified output of the routing kernel.

Which statement is true?

A. The default static route through 10.200.1.254 is not in the forwarding information base. B. The BGP route to 10.0.4.0/24 is not in the forwarding information base. C. The egress interface associated with static route 8.8.8.8/32 is administratively up. D. The default static route through port2 is in the forwarding information base.

Correct Answer: B

QUESTION NO: 3
Refer to the exhibit, which contains the output of diagnose vpn tunnel list.

Which command will capture ESP traffic for the VPN named DialUp_0?

A. diagnose sniffer packet any ' esp and host 10.200.3.2 ' B. diagnose sniffer packet any ' ip proto 50 ' C. diagnose sniffer packet any ' host 10.0.10.10 ' D. diagnose sniffer packet any ' port 4500 '

Correct Answer: D

QUESTION NO: 4
Refer to the exhibit.

A partial output from an IKE real-time debug is shown
The administrator does not have access to (he remote gateway
Based on the debug output, which two conclusions can you draw? (Choose two.)

A. The remote peer is the initiating peer. B. There is a Diffie-Hellman group mismatch. C. This is a phase1 negotiation. D. This is a phase2 negotiation

Correct Answer: A,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
Which statement about IKEv2 is true?

A. IKEv1 and IKEv2 have enough of the header format in common that both versions can run over the same UDP port. B. Both IKEv1 and IKEv2 share the feature of asymmetric authentication. C. IKEv1 and IKEv2 use the same TCP port but run on different UDP ports. D. IKEv1 and IKEv2 share the concept of phase1 and phase2.

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
Refer to the exhibit.

The output of the command diagnose vpn tunnels liar is shown.
Which two statements accurately describe the status of the tunnel? (Choose two.)

A. There is currently no traffic traversing the tunnel B. Phase 2 is down C. Both Phase 1 and Phase 2 were negotiated successfully. D. Phase 1 is down.

Correct Answer: A,B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

Fortinet FCSS - Network Security 7.6 Support Engineer - FCSS_NST_SE-7.6 Exam Questions