[Q20-Q35] 合格させるFCSS_NST_SE-7.4試験一発合格保証100%カバー率でリアル試験問題 [2025年02月]

合格させるFCSS_NST_SE-7.4試験一発合格保証100%カバー率でリアル試験問題 [2025年02月]

有効なFCSS_NST_SE-7.4テスト解答Fortinet FCSS_NST_SE-7.4試験PDF問題を試そう

質問 # 20
Refer to the exhibit, which shows the output of get router info bgp summary.

Which two statements are true? (Choose two.)

A. The TCP connection with BGP neighbor 100.64.2.254 was successful.
B. The local ForliGate has received one prefix from BGP neighbor 100.64.1.254.
C. The local FortiGate has received 18 packets from a BGP neighbor.
D. The local FortiGate is still calculating the prefixes received from BGP neighbor 100.64.2.264

正解：B、C

質問 # 21
Exhibit.

Refer to the exhibit, which shows the output of diagnose automation test.
What can you observe from the output? (Choose two.)

A. An HA failover occurred.
B. The automation stitch test is not being logged.
C. The test was unsuccessful.
D. The automation stitch test failed but the HA failover was successful.

正解：B、C

質問 # 22
Which statement about IKEv2 is true?

A. IKEv1and IKEv2 share the concept of phase1and phase2.
B. IKEv1and IKEv2 have enough of the header format in common that both versions can run over the same UDP port.
C. IKEv1and IKEv2 use same TCP port but run on different UDP ports.
D. Both IKEv1and IKEv2 share the feature of asymmetric authentication.

正解：B

質問 # 23
Exhibit.

Refer to the exhibit, which contains partial output from an IKE real-time debug.
Which two statements about this debug output are correct? (Choose two.)

A. The initiator provided remote as its IPsec peer ID.
B. It shows a phase 2 negotiation.
C. Perfect Forward Secrecy (PFS) is enabled in the configuration.
D. The local gateway IP address is 10.0.0.1.

正解：A、B

質問 # 24
Refer to the exhibit, which shows the omitted output of a session table entry.

Which two statements are true? (Choose two.)

A. The traffic matches Policy ID 1.
B. The session has been offloaded.
C. NP7 is handling offloading of this session.
D. The traffic has been tagged for VLAN 0000.

正解：B、C

質問 # 25
Refer to the exhibit, which shows partial outputs from two routing debug commands.

Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

A. Set the priority of the static default route using port1 to 10.
B. Set snat-route-change to enable.
C. Set preserve-session-route to enable.
D. Set the priority of the static default route using port2 to 1.

正解：A

質問 # 26
Refer to the exhibit.

Which three pieces of information does the diagnose sys top command provide? (Choose three.)

A. The miglogd daemon is running on CPU core ID 0.
B. The miglogd daemon would be on top of the list, if the administrator pressed m on the keyboard.
C. The cmdbsvr process is occupying 2.4% of the total user memory space.
D. The diagnose sys top command has been running for 18 minutes.
E. If the neweli daemon continues to be in the R state, it will need to be manually restarted.

正解：A、C、D

質問 # 27
Refer to the exhibits.

An administrator Is expecting to receive advertised route 8.8.8.8/32 from FGT-A. On FGT-B, they confirm that the route is being advertised and received, however, the route is not being injected into the routing table.
What is the most likely cause of this issue?

A. FGT-B is configured with a prefix list denying the 8.8.8.8/32 network to be injected into the routing table.
B. FGT-8 is configured with a distribution list denying the 8.8.8.8/32 network to be injected into the routing table.
C. The administrator has misconfigured redistribution of routes on FGT-A.
D. A batter route to the 8.8.8.8/32 network exists in the routing table.

正解：A

質問 # 28
Exhibit.

Refer to the exhibit, which shows the output of a session. Which two statements are true? (Choose Iwo.)

A. The session was initiated from an authenticated user.
B. The session is being inspected using flow inspection.
C. The TCP session has been successfully established.
D. The session is being offloaded.

正解：A、C

質問 # 29
Exhibit.

Refer to the exhibit, which shows the output of a diagnose command.
What can you conclude about the debug output in this scenario?

A. Servers with a negative TZ value are less preferred for rating requests.
B. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.
C. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.
D. FortiGate used 64.26.151.37 as the initial server to validate its contract.

正解：B

質問 # 30
Exhibit.

Refer to the exhibit, which shows a FortiGate configuration.
An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however the web filter is not inspecting any traffic that is passing through the policy.
What must the administrator do to fix the issue?

A. Enable fortiguard-anycast.
B. Disable webfilter-force-off.
C. Increase webfilter-timeout.
D. Change protocol to TCP.

正解：B

質問 # 31
Which exchange lakes care of DoS protection in IKEv2?

A. IKE_Auth
B. Create_CHILD_SA
C. IKE_SA_NIT
D. IKE_Req_INIT

正解：D

質問 # 32
Which authentication option can you not configure under config user radius on FortiOS?

A. pap
B. eap
C. mschap
D. mschap2

正解：B

質問 # 33
Which statement aboutprotocol options is true?

A. Protocol options allow administrators to configure the Any setting for all enabled protocols, which provides the most efficient use of system resources.
B. Protocol options allow administrators to configure a maximum number of sessions for each configured protocol.
C. Protocol options allow administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on.
D. Protocol options give administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols.

正解：C

質問 # 34
Refer to theexhibit,which shows the output of getrouter info ospf neighbor.

What can you conclude from the command output?

A. The local FortiGate is not a DROther.
B. All neighbors are in area 0.0.0.0.
C. The local FortiGate is the BDR.
D. The network type connecting the local Fortigate and OSPF neighbor 0.0.0.10 is point-to-point.

正解：D

質問 # 35
......

Fortinet FCSS_NST_SE-7.4 認定試験の出題範囲：

トピック	出題範囲
トピック 1	VPN: This section tests the knowledge of IT professionals, such as system engineers in diagnosing and resolving VPN-related issues. It emphasizes troubleshooting IPsec IKE versions 1 and 2 to ensure secure and reliable communication between networks or remote users.
トピック 2	Security Profiles: This segment of the exam tests the skills of IT professionals, such as network administrators in handling and troubleshooting security profile-related challenges.
トピック 3	System Troubleshooting: This part of the exam assesses the ability of Fortinet network and security professionals to diagnose and fix typical system-related problems within Fortinet solutions. It involves troubleshooting FortiGate-to-FortiGate Security Fabric issues, addressing automation stitch concerns, and detecting resource-related problems using integrated tools.
トピック 4	Routing: This part of the exam examines the expertise of Fortinet network and security professionals, in routing enterprise traffic effectively.
トピック 5	Authentication: This section evaluates the proficiency of Fortinet network and security professionals in resolving both local and remote authentication issues.