必ず合格できるFortinet FCSS_NST_SE-7.4試験の正確な42問題と解答あります [Q15-Q35]

必ず合格できるFortinet FCSS_NST_SE-7.4試験の正確な42問題と解答あります

最新 [2025年03月20日]2025年最新の実際にある検証済みのFCSS_NST_SE-7.4問題集

Fortinet FCSS_NST_SE-7.4 認定試験の出題範囲：

トピック	出題範囲
トピック 1	VPN: This section tests the knowledge of IT professionals, such as system engineers in diagnosing and resolving VPN-related issues. It emphasizes troubleshooting IPsec IKE versions 1 and 2 to ensure secure and reliable communication between networks or remote users.
トピック 2	System Troubleshooting: This part of the exam assesses the ability of Fortinet network and security professionals to diagnose and fix typical system-related problems within Fortinet solutions. It involves troubleshooting FortiGate-to-FortiGate Security Fabric issues, addressing automation stitch concerns, and detecting resource-related problems using integrated tools.
トピック 3	Routing: This part of the exam examines the expertise of Fortinet network and security professionals, in routing enterprise traffic effectively.
トピック 4	Security Profiles: This segment of the exam tests the skills of IT professionals, such as network administrators in handling and troubleshooting security profile-related challenges.
トピック 5	Authentication: This section evaluates the proficiency of Fortinet network and security professionals in resolving both local and remote authentication issues.

質問 # 15
Exhibit.

Refer to the exhibit, which shows a partial output of diagnose hardware aysinfo memory.
Which two statements about the output are true? (Choose two.)

A. The I/O cache, which has 641364 kB of memory allocated to it.
B. There are 98908 kB o! memory that will never be used.
C. The user space has 708880 kB of physical memory that is not used by the system.
D. The value indicated next to the inactive heading represents the currently unused cache page.

正解：B、D

質問 # 16
Exhibit.

Refer to the exhibit, which shows the output of a session. Which two statements are true? (Choose Iwo.)

A. The session is being inspected using flow inspection.
B. The session is being offloaded.
C. The session was initiated from an authenticated user.
D. The TCP session has been successfully established.

正解：C、D

質問 # 17
Refer to the exhibit, which shows the output of a policy route table entry.

Which type of policy route does the output show?

A. AnSD-WAN rule
B. A regular policy route
C. An ISDB route
D. A regular policy route, which is associated with an active static route in the FIB

正解：C

質問 # 18
Refer to the exhibit, which shows the output of a BGP debug command.

Whatcan you conclude about the router in this scenario?

A. The router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the 8GP session with the local router.
B. An inbound route-map on local router is blocking the prefixes from neighbor 100.64.3.1.
C. The BGP session with peer 10.127.0.75 is up.
D. All of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4.

正解：C

質問 # 19
Exhibit.

Refer to the exhibit, which shows two entries that were generated in theFSSO collectoragent logs.
What three conclusions can you draw from these log entries? {Choose three.)

A. DNS resolution is unable to resolve the workstation name.
B. Remote registry is not running on the workstation.
C. The FortiGate firmware version is not compatible with that of the collector agent.
D. The user's status shows as "not verified" in the collector agent.
E. A firewall is blocking traffic to port 139 and 445.

正解：B、D、E

質問 # 20
Which statement aboutprotocol options is true?

A. Protocol options allow administrators to configure a maximum number of sessions for each configured protocol.
B. Protocol options allow administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on.
C. Protocol options give administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols.
D. Protocol options allow administrators to configure the Any setting for all enabled protocols, which provides the most efficient use of system resources.

正解：B

質問 # 21
Refer to the exhibit.

Which three pieces of information does the diagnose sys top command provide? (Choose three.)

A. The miglogd daemon is running on CPU core ID 0.
B. The diagnose sys top command has been running for 18 minutes.
C. If the neweli daemon continues to be in the R state, it will need to be manually restarted.
D. The cmdbsvr process is occupying 2.4% of the total user memory space.
E. The miglogd daemon would be on top of the list, if the administrator pressed m on the keyboard.

正解：A、B、D

質問 # 22
Refer to the exhibit, which shows the output o! the BGP database.

Which two statements are correct? (Choose two.)

A. The advertised prefix of 10.20.30.0'24 is being advertised through the redistribution of another routing protocol.
B. The advertised prefix of 10.20.30.0'24 was configured using the network command.
C. The first four prefixes are being advertised using a legacy route advertisement.
D. The output shows all prefixes advertised by all neighbors as well as the local router.

正解：B、D

質問 # 23
Exhibit.

Refer to the exhibit, which shows the output of diagnose automation test.
What can you observe from the output? (Choose two.)

A. An HA failover occurred.
B. The automation stitch test failed but the HA failover was successful.
C. The automation stitch test is not being logged.
D. The test was unsuccessful.

正解：C、D

質問 # 24
Which exchange lakes care of DoS protection in IKEv2?

A. Create_CHILD_SA
B. IKE_Auth
C. IKE_SA_NIT
D. IKE_Req_INIT

正解：D

質問 # 25
Which authentication option can you not configure under config user radius on FortiOS?

A. mschap2
B. mschap
C. eap
D. pap

正解：C

質問 # 26
Exhibit.

Refer to the exhibit, which contains a screenshot of some phase 1 settings.
The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

However, the IKE real-time debug does not show any output. Why?

A. The administrator must also run the command diagnose debug enable.
B. Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.
C. The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.
D. The log-filter setting is incorrect. The VPN traffic does not match this filter.

正解：A

質問 # 27
An administrator wants to capture encrypted phase 2 traffic between two FotiGate devices using the built-in sniffer.
If the administrator knows that there Is no NAT device located between both FortiGate devices, which command should the administrator run?

A. diagnose sniffer packet any 'udp port 4500'
B. diagnose sniffer packet any 'ah'
C. diagnose sniffer packet any 'udp port 500'
D. diagnose sniffer packet any 'lp proto 50'

正解：D

質問 # 28
Exhibit.

Refer to the exhibit, which contains partial output from an IKE real-time debug.
Which two statements about this debug output are correct? (Choose two.)

A. The initiator provided remote as its IPsec peer ID.
B. Perfect Forward Secrecy (PFS) is enabled in the configuration.
C. The local gateway IP address is 10.0.0.1.
D. It shows a phase 2 negotiation.

正解：A、D

質問 # 29
Refer to the exhibit, which shows the output of get router info bgp summary.

Which two statements are true? (Choose two.)

A. The local FortiGate is still calculating the prefixes received from BGP neighbor 100.64.2.264
B. The TCP connection with BGP neighbor 100.64.2.254 was successful.
C. The local ForliGate has received one prefix from BGP neighbor 100.64.1.254.
D. The local FortiGate has received 18 packets from a BGP neighbor.

正解：C、D

質問 # 30
Refer to the exhibit, which shows partial outputs from two routing debug commands.

Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?