FCSS - Network Security 7.6 Support Engineer (FCSS_NST_SE-7.6) Free Practice Test

Question 1

When FortiGate enters conserve mode because of memory pressure, which action can FortiGate perform to preserve memory?

A. FortiGate switches to a less memory-intensive inspection mode, such as flow-based inspection.

B. FortiGate begins dropping all new sessions to protect resources.

C. FortiGate reduces or stops non-essential processes like logging and antivirus scanning.

D. FortiGate automatically reboots to clear memory and restore full operation.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Exhibit.

Refer to the exhibit, which shows the output of a diagnose command.
What can you conclude about the debug output in this scenario?

A. The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.

B. Servers with a negative TZ value are less preferred for rating requests.

C. There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.

D. FortiGate used 64.26.151.37 as the initial server to validate its contract.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit.

The output of the command diagnose vpn tunnel list is shown.
Reviewing the debug command, what is the current status of the traffic flowing through the tunnel?

A. The outbound IPsec SA was copied to the NPU.

B. NP6 is handling the offloading.

C. The inbound and outbound IPsec SAs were copied to the NPU.

D. The inbound IPsec SA was copied to the NPU.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit, which shows the output of the command get router info ospf neighbor.

To what extent does FortiGate operate when looking at its OSPF neighbors? (Choose two.)

A. The local FortiGate has at least one interface that participates in a point-to-point network.

B. Neighbor 0.0.0.18 is the designated router (DR).

C. The local FortiGate has at least one interface that participates in a broadcast network.

D. The local FortiGate is the DR.

Correct Answer: A,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which two statements about an auxiliary session ate true? (Choose two.)

A. With the auxiliary session selling disabled, only auxiliary sessions are offloaded.

B. With the auxiliary session setting enabled. ECMP traffic is accelerated to the NP6 processor.

C. With the auxiliary session setting disabled, for each traffic path. FortiGate uses the same auxiliary session.

D. With the auxiliary session setting enabled. Iwo sessions are created in case of routing change.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Refer to the exhibit.

The output of diagnose sys session list command is shown.
If the HA ID for the primary device is 9, what happens if the primary fails and the secondary becomes the primary?

A. The session state is preserved but the kernel will re-evaluate the session because the routing information will be flushed

B. The session continues to permit traffic on the new primary device after failover. without requiring the client to restart the session with the server.

C. The session will be removed from the session table of the secondary device because the TCP session is not yet fully established.

D. The session is synchronized with the secondary device, however, because application control is applied. the session is marked dirty and has to be reevaluated after failover.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit.

The exhibit shows a session entry. Which statement about this TCP session is true?

A. The session will expire in one second.

B. It is a TCP session from 10.9.31.117 to 10.1.0.3.

C. The session is offloaded using NPU.

D. Return traffic to the initiator is sent to 10.9.31.117.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Exhibit.

Refer to the exhibit, which shows two entries that were generated in the FSSO collector agent logs.
What three conclusions can you draw from these log entries? {Choose three.)

A. The FortiGate firmware version is not compatible with that of the collector agent.

B. The user's status shows as "not verified" in the collector agent.

C. A firewall is blocking traffic to port 139 and 445.

D. Remote registry is not running on the workstation.

E. DNS resolution is unable to resolve the workstation name.

Correct Answer: B,C,D

Question 9

Refer to the exhibit, which shows the output of a diagnose command. What can you conclude from the RTT value?

A. It determines which FortiGuard server is used for license validation.

B. Its value represents the time it takes to receive a response after a rating request is sent to a particular server.

C. Its value is incremented with each packet lost.

D. Its initial value is statically set to 10.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

Which two statements about Security Fabric communications are true? (Choose two.)

A. FortiTelemetry and Neighbor Discovery both operate using TCP.

B. FortiTelemetry must be manually enabled on the FortiGate interface.

C. By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.

D. The default port for Neighbor Discovery can be modified.

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet FCSS - Network Security 7.6 Support Engineer (FCSS_NST_SE-7.6) Free Practice Test