Fortinet FCSS – Enterprise Firewall Administrator FCSS_EFW_AD-7.4 Dumps (V9.02): Continue to Read FCSS_EFW_AD-7.4 Free Dumps (Part 3, Q81-Q100)

1. An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems.

During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs.

When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions.

Which TCP session timer must be increased to fix this problem?

2. Which statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

3. Which two configuration commands change the default behavior for content-inspected traffic while FortiGate is in conserve mode? (Choose two.)

4. An administrator is deploying APs that are connecting over an IPsec network. All APs have been configured to connect to FortiGate manually. FortiGate can discover the APs and authorize them.

However, FortiGate is unable to establish CAPWAP tunnels to manage the APs.

Which configuration setting can the administrator perform to resolve the problem?

5. Refer to the exhibit, which contains the partial output of an IKE real-time debug.

The administrator does not have access to the remote gateway. Based on the debug output, which configuration change can the administrator make to the local gateway to resolve the phase 1 negotiation error?

6. Refer to the exhibit, which shows a FortiGate configuration.

An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy.

What must the administrator change to fix the issue?

7. Which step can be taken to ensure that only FortiAP devices receive IP addresses from a DHCP server on FortiGate?

8. Which ADVPN configuration must be configured using a script on FortiManager, when using VPN Manager to manage FortiGate VPN tunnels?

9. View the exhibit, which contains the output of a debug command, then answer the question below.

Why is the gateway to source for this session 0.0.0.0?

10. View the central management configuration shown in the exhibit, and then answer the question below.

Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

11. View the exhibit, which contains the output of a BGP debug command, and then answer the question below.

Which of the following statements about the exhibit are true? (Choose two.)

12. View the exhibit, which contains the partial output of the web filtering cache, and then answer the question below.

Which category does www.elitehacking.com belong to?

13. Examine the following partial outputs from two routing debug commands; then answer the question below:

Why the default route using port2 is not displayed in the output of the second command?

14. Refer to the exhibit, which contains the partial output of a diagnose command.

Based on the output, which two statements are correct? (Choose two.)

15. Refer to the exhibit, which shows a session entry.

Which statement about this session is true?

16. When a FortiLink interface is configured on a FortiGate, which VLAN is typically set as the default allowed VLAN on all connected FortiSwitch ports?

17. View the exhibit, then answer the question below.

Which of the following commands will bring up the tunnel?

18. When using the SSL certificate inspection method to inspect HTTPS traffic, how does FortiGate filler web requests when the client browser does not provide the server name indication (SNI) extension?

19. Which troubleshooting step is applicable when investigating antivirus and IPS update issues on FortiGate?

20. View the exhibit, which contains the output of a debug command, and then answer the question below:

What statement is correct about this FortiGate?