Free Fortinet FCSS_NST_SE-7.4 Exam Questions

Become Fortinet Certified with updated FCSS_NST_SE-7.4 exam questions and correct answers

Page: 1 / 14

Total 66 Questions | Updated On: Oct 28, 2025

Add To Cart

Question 1

The local OSPF router is unable to establish adjacency with a peer. Which two things should the administrator do to troubleshoot the issue? (Choose two.)

A : Check whether TCP port 179 is blocked.

B : Check if there is an active static route to the peer.

C : Check whether both peers have an IP address within the same subnet.

D : Check if IP protocol 89 is blocked.

Answer: C,D

Question 2

Which two statements about Security Fabric communications are true? (Choose two.)

A : FortiTelemetry and Neighbor Discovery both operate using TCP.

B : The default port for Neighbor Discovery can be modified.

C : FortiTelemetry must be manually enabled on the FortiGate interface.

D : By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.

Answer: C,D

Question 3

Which two statements about Security Fabric communications are true? (Choose two.)

A : FortiTelemetry and Neighbor Discovery both operate using TCP.

B : The default port for Neighbor Discovery can be modified.

C : FortiTelemetry must be manually enabled on the FortiGate interface.

D : By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.

Answer: C,D

Question 4

Refer to the exhibit, which shows partial outputs from two routing debug commands.Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

A : Set snat-route-change to enable.

B : Set the priority of the static default route using port2 to 1.

C : Set preserve-session-route to enable.

D : Set the priority of the static default route using port1 to 10.

Answer: D

Question 5

Refer to the exhibit, which shows the port1 interface configuration on FortiGate and partial session information for ICMP traffic.What happens to the session information if a routing change occurs that affects this session?

A : Only the interface and gateway information for dev=7 will be removed.

B : The session information will not change unless the current route has been removed from the routing table.

C : The session will be flagged as dirty but no route lookups will be performed.

D : Sessions involving port7 or port19 will not have their routing information flushed.

Answer: B

Page: 1 / 14

Total 66 Questions | Updated On: Oct 28, 2025

Add To Cart