Question 1

Which two statements about Security Fabric communications are true? (Choose two.)

Options :

A : FortiTelemetry and Neighbor Discovery both operate using TCP.

B : The default port for Neighbor Discovery can be modified.

C : FortiTelemetry must be manually enabled on the FortiGate interface.

D :

By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.

Answer: C,D

Question 2

Refer to the exhibit, which shows partial outputs from two routing debug commands.

Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

Options :

A : Set snat-route-change to enable.

B : Set the priority of the static default route using port2 to 1.

C : Set preserve-session-route to enable.

D : Set the priority of the static default route using port1 to 10.

Answer: D

Question 3

Refer to the exhibit, which shows the output of a debug command.

Which two statements about the output are true? (Choose two.)

Options :

A : The interlace is part of the OSPF backbone area.

B : There are a total of five OSPF routers attached to the vorz4 network segment

C : One of the neighbors has a router ID of 0.0.0.4.

D : In the network connected to port4, two OSPF routers are down.

Answer: A,D

Question 4

Refer to the exhibit, which shows the port1 interface configuration on FortiGate and partial session information for ICMP traffic.

What happens to the session information if a routing change occurs that affects this session?

Options :

A : Only the interface and gateway information for dev=7 will be removed.

B :

The session information will not change unless the current route has been removed from the routing table.

C : The session will be flagged as dirty but no route lookups will be performed.

D : Sessions involving port7 or port19 will not have their routing information flushed.

Answer: B

Question 5

Which statement about protocol options is true?

Options :

A :

Protocol options allow administrators to configure a maximum number of sessions for each configured protocol.

B :

Protocol options give administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols.

C :

Protocol options allow administrators to configure the Any setting for all enabled protocols, which provides the most efficient use of system resources.

D :

Protocol options allow administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on.

Answer: D

Confidently Practice Online with Free FCSS_NST_SE-7.4 Exam Cram

Buying Options: