FCSS_NST_SE-7.6 Free Practice Test

During which phase of IKEv2 does the Diffie-Helman key exchange take place?

1. A. IKE_Req_INIT
2. B. Create_CHILD_SA
3. C. IKE_Auth
4. D. IKE_SA_INIT

Correct Answer: D

What are two reasons you might see iprope_in_check() check failed, drop when using the debug flow? (Choose two.)

1. A. Packet was dropped because of policy route misconfiguration.
2. B. Packet was dropped because of traffic shaping.
3. C. Trusted host list misconfiguration.
4. D. VIP or IP pool misconfiguration.

Correct Answer: CD

Refer to the exhibit, which shows the port1 interface configuration on FortiGate and partial session information for ICMP traffic.

What happens to the session information if a routing change occurs that affects this session?
A. Only the interface and gateway information for dev=7 will be removed.
B. The session information will not change unless the current route has been removed from the routing table.
C. The session will be flagged as dirty but no route lookups will be performed.
D. Sessions involving port7 or port19 will not have their routing information flushed.

1. A.

Correct Answer: B

Exhibit.

Refer to the exhibit, which shows a partial output of diagnose hardware aysinfo memory. Which two statements about the output are true? (Choose two.)

1. A. There are 98908 kB o! memory that will never be used.
2. B. The user space has 708880 kB of physical memory that is not used by the system.
3. C. The I/O cache, which has 641364 kB of memory allocated to it.
4. D. The value indicated next to the inactive heading represents the currently unused cache page.

Correct Answer: AD

Refer to the exhibit, which shows the output of the command get router info ospf neighbor.

To what extent does FortiGate operate when looking at its OSPF neighbors? (Choose two.)

1. A. The local FortiGate has at least one interface that participates in a broadcast network.
2. B. The local FortiGate has at least one interface that participates in a point-to-point network.
3. C. The local FortiGate is the DR.
4. D. Neighbor 0.0.0.18 is the designated router (DR).

Correct Answer: AB
The command on this slide shows a summary of the statuses of all the OSPF neighbors. For each neighbor, it displays the adjacency state and if it is a DR, a BDR, or neither (DROther) Pagina 362 Enterprise_Firewall_7.2_Study. - Point-to-point networks contain only two peers, one at each end of a point-to-point link - Broadcast networks (multi-access) support more than two attached routers. They also support sending messages to multiple recipients (broadcasting). Pagina 365 Enterprise_Firewall_7.2_Study. In any multi-access network there is one DR and one BDR. Pagina 439 Network_Security_Support_Engineer_7.4_Study FULL/- This represents a point-to-point network