FCSS_NST_SE-7.4: FCSS - Network Security 7.4 Support Engineer Output Practice Questions

Exhibit. Refer to the exhibit, which contains a screenshot of some phase 1 settings. The VPN is not up. To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate: However, the IKE real-time debug does not show any output. Why?

• AA. The administrator must also run the command diagnose debug enable.
• BB. The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.
• CC. The log-filter setting is incorrect. The VPN traffic does not match this filter.
• DD. Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.

Exhibit. Refer to the exhibit, which shows the output of a diagnose command. What can you conclude about the debug output in this scenario?

• AA. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.
• BB. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.
• CC. FortiGate used 64.26.151.37 as the initial server to validate its contract.
• DD. Servers with a negative TZ value are less preferred for rating requests.

Refer to the exhibit, which contains the output ofdiagnose vpn tunnellist. Which command will capture ESP traffic for the VPN named DialUp_0?

• AA. diagnose sniffer packet any 'ip proto 50'
• BB. diagnose sniffer packet any 'host 10.0.10.10'
• CC. diagnose sniffer packet any 'esp and host 10.200.3.2'
• DD. diagnose sniffer packet any 'port 4500'

Exhibit. Refer to the exhibit, which shows the output of a session. Which two statements are true? (Choose Iwo.)

Select 2 answers.

• AA. The TCP session has been successfully established.
• BB. The session was initiated from an authenticated user.
• CC. The session is being inspected using flow inspection.
• DD. The session is being offloaded.

Refer to the exhibit,which shows the output of getrouter info ospf neighbor. What can you conclude from the command output?

• AA. The network type connecting the local Fortigate and OSPF neighbor 0.0.0.10 is point-to- point.
• BB. All neighbors are in area 0.0.0.0.
• CC. The local FortiGate is the BDR.
• DD. The local FortiGate is not a DROther.