Fortinet FCSS_EFW_AD-7.4 Dumps (V9.02): Check the FCSS_EFW_AD-7.4 Free Dumps (Part 2, Q41-Q80) Online

1. Which configuration can be used to reduce the number of BGP sessions in an IBGP network?

2. Examine the output from the ‘diagnose vpn tunnel list’ command shown in the exhibit; then answer the question below.

Which command can be used to sniffer the ESP traffic for the VPN DialUP_0?

3. Refer to the exhibit, which shows the output of a debug command.

Which two statements about the output are true? (Choose two.)

4. View the exhibit, which contains the output of a diagnose command, and then answer the question below.

What statements are correct regarding the output? (Choose two.)

5. Refer to the exhibit, which contains the partial output of the get vpn ipsec tunnel details command.

Based on the output, which two statements are correct? (Choose two.)

6. Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

7. Which of the following troubleshooting steps is applicable when investigating antivirus and IPS update issues on FortiGate?

8. Which layer of the FortiOS architecture does an application process or daemon run on?

9. View the exhibit, which contains the output of a real-time debug, and then answer the question below.

Which one of the following statements describes why the update is failing?

10. Which of the following tasks are part of the manual registration process for adding a FortiGate to a FortiManager for central management? (Choose three.)

11. Examine the output of the 'diagnose debug rating' command shown in the exhibit; then answer the question below.

Which statement are true regarding the output in the exhibit? (Choose two.)

12. Examine the output of the ‘get router info bgp summary’ command shown in the exhibit; then answer the question below.

Which statement can explain why the state of the remote BGP peer 10.200.3.1 is Connect?

13. View the exhibit, which contains the output of a real-time debug, and then answer the question below.

Which of the following statements is true regarding this output? (Choose two.)

14. View the following FortiGate configuration.

All traffic to the Internet currently egresses from port1.

The exhibit shows partial session information for Internet traffic from a user on the internal network:

If the priority on route ID 1 were changed from 5 to 20, what would happen to traffic matching that user’s session?

15. Refer to the exhibit, which contains the output of the diagnose vpn tunnel list.

Which command will capture ESP traffic for the VPN named DialUp_0?

16. Examine the following partial output from a sniffer command; then answer the question below.

What is the meaning of the packets dropped counter at the end of the sniffer?

17. Which of the following statements are correct regarding application layer test commands? (Choose two.)

18. Examine the output of the ‘get router info bgp summary’ command shown in the exhibit; then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

19. Which two statements about an auxiliary session are true? (Choose two.)

20. What is an OSPF area border router?

21. What is the diagnose test application ipsmenitor 5 command used for?

22. Examine the output of the ‘get router info ospf interface’ command shown in the exhibit; then answer the question below.

Which statements are true regarding the above output? (Choose two.)

23. A corporate network allows internet Access to FSSO users only. The FSSO user student does not have internet access after successfully logged into the Windows AD network.

The output of the ‘diagnose debug authd fsso list’ command does not show student as an active FSSO user. Other FSSO users can access the Internet without problems.

What should the administrator check? (Choose two.)

24. What action does FortiSwitch take when it receives a loop guard data packet (LGDP) that was sent by itself?

25. An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device.

What can the administrator do to fix this problem?

26. View the exhibit, which of the contains the partial output of an IKE real-time debug, then answer the question below.

Which of the following statements about this debug output are true? (Choose two.)

27. Which two statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

28. View the exhibit, which contains the output of get sys ha status, and then answer the question below.

Which statements are correct regarding the output? (Choose two.)

29. A FortiGate device has the following LDAP configuration:

The administrator executed the ‘dsquery’ command in the Windows LDAp server 10.0.1.10, and got the following output:

>dsquery user -samid administrator

"CN-Administrator, CN-Users, DC=trainingAD, DC-training, DC-lab"

Based on the output, what FortiGate LDAP setting is configured incorrectly?

30. View the exhibit, which contains a session entry, and then answer the question below.

Which statement is correct regarding this session?

31. Which two statements about the use of digital certificates are true?

32. An administrator has configured a FortiGate device with two VDOMs: root and internal.

The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link.

What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

33. Which statement is true regarding File description (FD) conserve mode?

34. View the exhibit, which contains the partial output of an IKE real time debug, and then answer the question below.

The administrator does not have access to the remote gateway.

Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?

35. View the following exhibit, which contains the sniffer output for a passive mode FTP request.

An administrator has created the following custom IPS signature to block all FTP requests for passive mode: F-SBID (--attack_id 1002; --name "Block.FTP "; --protocol tcp; --flow from_client; --pattern "PASV"; --no_case;) Soon after the signature is enabled in an active IPS sensor, some false positive detections are generated.

Which option and value pair will allow more specific detection?

36. Examine these partial outputs from two routing debug commands:

# get router info routing-table database

S 0.0.0.0/0 [20/0] via 100.64.2.254, port2, [10/0]

S *> 0.0.0.0/0 [10/0] via 100.64.1.254, port1

# get router info routing-table all

S* 0.0.0.0/0 [10/0] via 100.64.1.254, port1

Why is the default route that uses port2 not in the output of the second command?

37. View the exhibit, which contains the output of a debug command, and then answer the question below.

Which one of the following statements about this FortiGate is correct?

38. View the following exhibit:

What two statements about this session are correct? (Choose two.)

39. An administrator wants to capture encrypted phase 2 traffic between two FortiGate devices using the built-in sniffer.

If the administrator knows that there is no NAT device located between both FortiGate devices, which command should the administrator run?

40. Refer to the exhibit, which contains the output of a diagnose command.

Which two statements about the output are true? (Choose two.)