FCSS - Enterprise Firewall 7.6 Administrator (FCSS_EFW_AD-7.6) Free Practice Test

Question 1

You are using Virtual eXtensible LAN (VXLAN) extensively on FortiGate. Which specialized acceleration hardware must you use to improve FortiGate performance?

A. CP10

B. CPU

C. NTurbo

D. NP7

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Refer to the exhibits.

The system administrator settings configured on a root FortiGate and the Security Fabric settings configured on a downstream FortiGate are shown.
When prompted to sign in with Security Fabric to the downstream FortiGate, a user enters the single sign-on (SSO) provider credentials.
What is the result?

A. The user is prompted to create an administrator account for AdminSSO.

B. The downstream FortiGate creates an SSO administrator account for AdminSSO with the super_admin profile.

C. The downstream FortiGate relies on the root FortiGate and does not create an administrator account.

D. The user accesses the downstream FortiGate with super_admin_readonly profile.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit, which contains a partial command output.

The administrator has configured BGP on FortiGate. The status of this new BGP configuration is shown in the exhibit.
What configuration must the administrator consider next?

A. Configure the local AS to 65300.

B. Contact the remote peer administrator to enable BGP

C. Enable ebgp-enforce-multihop.

D. Configure a static route to 100.65.4.1.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

What should be configured to provide hardware-accelerated inter-VDOM traffic?

A. VLAN

B. VDOM link

C. NPU vlinks

D. Physical link

Correct Answer: C

Question 5

Which two features can you use to segment an enterprise network?

A. VLAN

B. VDOM

C. ZTNA

D. IPsec

Correct Answer: A,B

Question 6

Which two recommendations prevent invalid paths when using zero phase 2 selectors?

A. Routing protocols

B. Exact selectors

C. Aggregate IPsec

D. Assign tunnel IP

Correct Answer: A,B

Question 7

Which technology should you use to facilitate dynamic direct tunnels and automatic link optimization in a hub-and-spoke VPN topology?

A. Use static IPsec tunnels

B. Use IP-in-IP tunneling

C. Use GRE over IPsec

D. Use ADVPN 2.0

Correct Answer: D

Question 8

In which two ways does FortiGate utlize the Internet Service Database (ISDB) within firewall policies and SD-WAN rules? (Choose two.)

A. The ISDB limits access by URL and domain.

B. FortiGate has a predefined list of all IP addresses and ports for specific applications downloaded from FortiGuard.

C. The ISDB blocks the IP addresses and ports of an application predefined by FortiGuard.

D. The ISDB works in proxy mode, allowing the analysis of packets in layers 3 and 4 of the OSI model.

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

How will configuring set tcp-mss-sender and set tcp-mss-receiver in a firewall policy affect the size and handling of TCP packets in the network?

A. The administrator must consider the payload size of the packet and the size of the IP header to configure a correct value in the firewall policy.

B. Applying commands in a firewall policy determines the largest payload a device can handle in a single TCP segment.

C. The TCP packet modifies the packet size only if the size of the packet is less than the one the administrator configured in the firewall policy.

D. The maximum segment size permitted in the firewall policy determines whether TCP packets are allowed or denied.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet FCSS - Enterprise Firewall 7.6 Administrator (FCSS_EFW_AD-7.6) Free Practice Test