Free Fortinet FCSS_NST_SE-7.6 Exam Questions

Question 1

Refer to the exhibits.FGT-1 is an area border router (ABR) that has interfaces in OSPF areas 0.0.0.0 and 0.0.0.5. FGT-3 acts as an autonomous system border router (ASBR), importing static routes into OSPF. FGT-2 is an internal router with all its interfaces belonging to area 0.0.0.5. FGT-1 is receiving all advertised routes from FGT-2, however, FGT-3 is not receiving any of the advertised routes from FGT-1. What is the most likely reason for this? (Choose one answer)

A : Area 0.0.0.5 is configured not to propagate type 5 LSAs.

B : FGT-2 is configured with a distribution list to block all advertised routes from FGT-3.

C : FGT-3 and FGT-2 have not formed an OSPF adjacency yet.

D : IP protocol 89 is blocked between FGT-1 and FGT-3.

Answer: A

Question 2

Refer to the exhibits.FGT-1 is an area border router (ABR) that has interfaces in OSPF areas 0.0.0.0 and 0.0.0.5. FGT-3 acts as an autonomous system border router (ASBR), importing static routes into OSPF. FGT-2 is an internal router with all its interfaces belonging to area 0.0.0.5. FGT-1 is receiving all advertised routes from FGT-2, however, FGT-3 is not receiving any of the advertised routes from FGT-1. What is the most likely reason for this? (Choose one answer)

A : Area 0.0.0.5 is configured not to propagate type 5 LSAs.

B : FGT-2 is configured with a distribution list to block all advertised routes from FGT-3.

C : FGT-3 and FGT-2 have not formed an OSPF adjacency yet.

D : IP protocol 89 is blocked between FGT-1 and FGT-3.

Answer: A

Question 3

Refer to the exhibit.Which Iwo statements about FortiGate behavior relating to this session are correct? (Choose two.)

A : FortiGate is performing a security profile inspection using the CPU.

B : FortiGate redirected the client to trio captive portal to authenticate so that a correct policy match could be

C : FortiGate either initiated the session or the session terminates at FortiGate.

D : FortiGate forwarded this session without any inspection.

Answer: A,C

Question 4

Which three common FortiGate-to-collector-agent connectivity issues can you identify using the FSSO realtime debug? (Choose three.)

A : The SSL certificate used for FSSO over SSL has expired.

B : The connection was refused. There may be a mismatch of the TCP port.

C : FortiGate cannot reach the IP address of the collector agent.

D : The pro-shared key does not match

E : The group filters do not match.

Answer: B,C,D

Question 5