FCSS_NST_SE-7.6 Free Practice Test

Refer to the exhibit, which shows one way communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.

What three actions must you take to ensure successful communication? (Choose three.)
A. You must authorize the downstream FortiGate on the root FortiGate.
B. FortiGate must not be in NAT mode.
C. Ensure TCP port 8013 is not blocked along the way.
D. You must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.
E. Ensure the port for Neighbor Discovery has been changed.

1. A.

Correct Answer: ACD

Refer to the exhibit, which contains partial output from an IKE real-time debug.

The administrator does not have access to the remote gateway.
Based on the debug output, which configuration change the administrator make to the local gateway to resolve the phase 1 negotiation error?

1. A. In the phase 1 proposal configuration, add AES256-SHA256 to the list of encryption algorithms.
2. B. In the phase 1 proposal configuration, add AESCBC-SHA2 to the list of encryption algorithms.
3. C. In the phase 1 network configuration, set the IKE version to 2.
4. D. In the phase 1 proposal configuration, add AES128-SHA128 to the list of encryption algorithms.

Correct Answer: A

Refer to the exhibit, which shows the output of get router info ospf neighbor.

What can you conclude from the command output?

1. A. The network type connecting the local Fortigate and OSPF neighbor 0.0.0.10 is point-to- point.
2. B. All neighbors are in area 0.0.0.0.
3. C. The local FortiGate is the BDR.
4. D. The local FortiGate is not a DROther.

Correct Answer: A

Refer to the exhibits.

An administrator is attempting to advertise the network configured on port3. However, FGT-A is not receiving the prefix.
Which two actions can the administrator take to fix this problem? (Choose two.)

1. A. Modify the prefix using the network command from 172.16.0.0/16 to 172.16.54.0/24.
2. B. Manually add the BGP route on FGT-A.
3. C. Restart BGP using a soft reset to force both peers to exchange their complete BGP routing tables.
4. D. Use the set network-import-check disable command.

Correct Answer: AD

Refer to the exhibits.

An administrator Is expecting to receive advertised route 8.8.8.8/32 from FGT-A. On FGT-B, they confirm that the route is being advertised and received, however, the route is not being injected into the routing table. What is the most likely cause of this issue?

1. A. A batter route to the 8.8.8.8/32 network exists in the routing table.
2. B. FGT-B is configured with a prefix list denying the 8.8.8.8/32 network to be injected into the routing table.
3. C. The administrator has misconfigured redistribution of routes on FGT-A.
4. D. FGT-8 is configured with a distribution list denying the 8.8.8.8/32 network to be injected into the routing table.

Correct Answer: B