Advance Your Career by Using Online FCSS_EFW_AD-7.4 Dumps

1. Which two statements correctly describe the characteristics of the Fortinet Security Fabric? (Choose two.)

2. A FortiGate is configured as an explicit web proxy. Clients using this web proxy are reposting DNS errors when accessing any website.

The administrator executes the following debug commands and observes that the n-dns-timeout counter is increasing:





What should the administrator check to fix the problem?

3. Refer to the exhibit, which contains the output of the diagnose vpn tunnel list.





Which command will capture ESP traffic for the VPN named DialUp_0?

4. Refer to the exhibit, which shows the ADVPN network topology and partial BGP configuration.









Which two parameters must an administrator configure in the config neighbor range for spokes shown in the exhibit? (Choose two.)

5. Which two statements about the Security Fabric are true? (Choose two.)

6. Refer to the exhibit.





An administrator is deploying a hub and spokes network and using OSPF as dynamic protocol.

Which configuration is mandatory for neighbor adjacency?

7. Which of the following troubleshooting steps is applicable when investigating antivirus and IPS update issues on FortiGate?

8. Examine the partial output from two web filter debug commands; then answer the question below:





Based on the above outputs, which is the FortiGuard web filter category for the web site www.fgt99.com?

9. Examine the partial output from the IKE real time debug shown in the exhibit; then answer the question below.









Why didn’t the tunnel come up?

10. Refer to the exhibit, which shows a session entry.





Which statement about this session is true?

11. An administrator added the following Ipsec VPN to a FortiGate configuration:

configvpn ipsec phasel -interface

edit "RemoteSite"

set type dynamic

set interface "portl"

set mode main

set psksecret ENC LCVkCiK2E2PhVUzZe

next

end

config vpn ipsec phase2-interface

edit "RemoteSite"

set phasel name "RemoteSite"

set proposal 3des-sha256

next

end

However, the phase 1 negotiation is failing. The administrator executed the IKF real time debug while attempting the Ipsec connection.

The output is shown in the exhibit.





What is causing the IPsec problem in the phase 1?

12. Which troubleshooting step is applicable when investigating antivirus and IPS update issues on FortiGate?

13. View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.





Which statements are correct regarding the output shown? (Choose two.)

14. An administrator is extensively using VXLAN on FortiGate.

Which specialized acceleration hardware does FortiGate need to improve its performance?

15. View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.





If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?

16. Refer to the exhibits, which show the configuration on FortiGate and partial internet session information from a user on the internal network.





An administrator would like to test session failover between the two service provider connections.

What changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)

17. Which ADVPN configuration must be configured using a script on FortiManager, when using VPN Manager to manage FortiGate VPN tunnels?

18. Refer to the exhibit, which shows the HA status of an active-passive cluster.





An administrator wants FortiGate_B to handle the Core2 VDOM traffic.

Which modification must the administrator apply to achieve this?

19. Refer to the exhibit, which shows the device and policy layers for FortiGate key operations.





How can the administrator restore a previous FortiGate configuration, which had more policies than the current one, without the layer synchronization between the device and policy layers on FortiManager?

20. Which two configuration changes can be applied to optimize the memory usage on FortiGate? (Choose two.)

21. Refer to the exhibit, which shows a physical topology and a traffic log.





The administrator is checking on FortiAnalyzer traffic from the device with IP address10.1.10.1, located behind the FortiGate ISFW device.

The firewall policy in on the ISFW device does not have UTM enabled and the administrator is surprised to see a log with the actionMalware, as shown in the exhibit.

What are the two reasons FortiAnalyzer would display this log? (Choose two.)

22. An administrator has decreased all the TCP session timers to optimize the FortiGate memory usage. However, after the changes, one network application started to have problems.

During the troubleshooting, the administrator noticed that the FortiGate deletes the sessions after the clients send the SYN packets, and before the arrival of the SYN/ACKs.

When the SYN/ACK packets arrive to the FortiGate, the unit has already deleted the respective sessions.

Which TCP session timer must be increased to fix this problem?

23. Refer to the exhibit, which contains partial output from an IKE real-time debug.





The administrator does not have access to the remote gateway.

Based on the debug output, which configuration change can the administrator make to the local gateway to resolve the phase 1 negotiation error?

24. Refer to the exhibit, which contains the partial output of an OSPF command.





An administrator is checking the OSPF status of a FortiGate device and receives the output shown in the exhibit.

What two conclusions can the administrator draw? (Choose two.)

25. What are valid options for handling DNS requests sent directly to a FortiGates interface IP? (Choose three.)

26. Examine the following routing table and BGP configuration; then answer the question below.





The BGP connection is up, but the local peer is NOT advertising the prefix 192.168.1.0/24.

Which configuration change will make the local peer advertise this prefix?

27. When investigating FortiGuard connectivity issues, which of the following is a valid troubleshooting step?

28. Refer to the exhibits.

The exhibits show a network topology, a firewall policy, and an SSL/SSH inspection profile configuration.













Why is FortiGate unable to detect HTTPS attacks on firewall policy ID 3 targeting the Linux server?

29. Refer to the exhibit, which contains a partial VPN configuration.





What can you conclude from this VPN IPsec phase 1 configuration?

30. Exhibits:









Refer to the exhibits, which contain the network topology and BGP configuration for a hub.

An administrator is trying to configure ADVPN with a hub-spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving route information from each other.

What change must the administrator make to the hub BGP configuration so that the routes learned by one spoke are forwarded to the other spokes?

31. An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device.

What can the administrator do to fix this problem?

32. 1.An administrator must ensure that users cannot access sites containing malware and spyware, while also protecting them from phishing attempts.

What is the most resource-efficient method to block access to these sites?

33. View the exhibit, which contains an entry in the session table, and then answer the question below.





Which one of the following statements is true regarding FortiGate’s inspection of this session?

34. Refer to the exhibit, which contains a CLI script configuration on FortiManager.





An administrator configured the CLI script on FortiManager, but the script failed to apply any changes to the managed device after being executed.

What are two reasons why the script did not make any changes to the managed device? (Choose two.)

35. You have configured FortiManager as a local FDS to provide FortiGate AV and IPS updates, but FortiGate devices are not receiving updates to their AV signature databases, IPS engines, or IPS signature databases.

Which two settings need to be verified for these features to function? (Choose two.)

36. Refer to the exhibit, which shows partial outputs from two routing debug commands.





Why is the port2 default route not in the second command output?

37. View the exhibit, which contains the partial output of an IKE real time debug, and then answer the question below.





The administrator does not have access to the remote gateway.

Based on the debug output, what configuration changes can the administrator make to the local gateway to resolve the phase 1 negotiation error?

38. Which of the following statements are true regarding the SIP session helper and the SIP application layer gateway (ALG)? (Choose three)

39. Refer to the exhibit, which shows the FortiGuard Distribution Network of a FortiGate device.

FortiGuard Distribution Network on FortiGate





An administrator is trying to find the web filter database signature on FortiGate to resolve issues with websites not being filtered correctly in a flow-mode web filter profile.

Why is the web filter database version not visible on the GUI, such as with IPS definitions?

40. A static route is configured for a FortiGate unit from the CLI using the following commands.

config router static

edit 1

set device "wan1"

set distance 20

set gateway 192.168.100.1

next

end

Which of the following conditions are required for this static default route to be displayed in the FortiGate unit's routing table? (Choose two.)

41. View the exhibit, which contains the partial output of an IKE real-time debug, and then answer the question below.





Why didn’t the tunnel come up?

42. View the exhibit, which contains a session entry, and then answer the question below.





Which statement is correct regarding this session?

43. Refer to the exhibit, which shows a FortiGate configuration.





An administrator is troubleshooting a web filter issue on FortiGate. The administrator has configured a web filter profile and applied it to a policy; however, the web filter is not inspecting any traffic that is passing through the policy.

What must the administrator change to fix the issue?

44. Which two conditions would prevent a static route from being added to the routing table? (Choose two.)

45. Refer to the exhibits, which show the configuration on FortiGate and partial session information for internet traffic from a user on the internal network.





If the priority on route ID 2 were changed from 10 to 0, what would happen to traffic matching that user session?

46. An administrator configured FGSP cluster members to encrypt the session synchronization. When the administrator takes a sniffer trace on the dedicated interface for the synchronization, the sniffer trace shows UDP packets only.

Which two reasons could cause the sniffer to capture only UDP packets? (Choose two.)

47. A company that acquired multiple branches across different countries needs to install new FortiGate devices on each of those branches. However, the IT staff lacks sufficient knowledge to implement the initial configuration on the FortiGate devices.

Which three approaches can the company take to successfully deploy advanced initial configurations on remote branches? (Choose three.)

48. An administrator must automate a weekly backup of all the FortiGate devices in an enterprise network.

Which two steps must the administrator follow to implement this? (Choose two.)

49. Examine the following partial outputs from two routing debug commands; then answer the question below:





Why the default route using port2 is not displayed in the output of the second command?

50. Refer to the exhibit, which shows a network diagram.





An administrator would like to modify the MED value advertised from FortiGate_1 to a BGP neighbor in the autonomous system 30.

What must the administrator configure on FortiGate_1 to implement this?

51. Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?

52. Examine these partial outputs from two routing debug commands:

# get router info routing-table database

S 0.0.0.0/0 [20/0] via 100.64.2.254, port2, [10/0]

S *> 0.0.0.0/0 [10/0] via 100.64.1.254, port1

# get router info routing-table all

S* 0.0.0.0/0 [10/0] via 100.64.1.254, port1

Why is the default route that uses port2 not in the output of the second command?

53. An administrator has configured a FortiGate device with two VDOMs: root and internal.

The administrator has also created and inter-VDOM link that connects both VDOMs. The objective is to have each VDOM advertise some routes to the other VDOM via OSPF through the inter-VDOM link.

What OSPF configuration settings must match in both VDOMs to have the OSPF adjacency successfully forming? (Choose three.)

54. Which two statements about bulk configuration changes using FortiManager CLI scripts are correct? (Choose two.)

55. View the IPS exit log, and then answer the question below.





What is the status of IPS on this FortiGate?

56. What does hyperscale capability in data center firewalls typically support?

57. Refer to the exhibit, which shows a partial web filter profile configuration.





Which action will FortiGate take if a user attempts to access www.dropbox.com, which is categorized as File Sharing and Storage?

58. Which two tasks are automated using the Install Wizard on FortiManager? (Choose two.)

59. Which statement about protocol options is true?

60. View the exhibit, which contains the partial output of the web filtering cache, and then answer the question below.





Which category does www.elitehacking.com belong to?

61. Refer to the exhibit, which contains a partial command output.





The administrator has configured BGP on FortiGate. The status of this new BGP configuration is shown in the exhibit.

What configuration must the administrator consider next?

62. Refer to the exhibit, whi ch shows a command out put.





FortiGate_A and FortiGate_B are members of an FGSP cluster in an enterprise network.

While testing the cluster using the ping command, the administrator monitors packet loss and found that the session output on FortiGate_B is as shown in the exhibit.

What could be the cause of this output on FortiGate_B?

63. What is the purpose of an internal segmentation firewall (ISFW)?

64. Refer to the exhibits, which contain the partial configurations of two VPNs on FortiGate.









An administrator has configured two VPNs for two different user groups. Users who are in the Users-2 group are not able to connect to the VPN. After running a diagnostics command, the administrator discovered that FortiGate is not matching the user-2 VPN for members of the Users-2 group.

Which two changes must the administrator make to fix the issue? (Choose two.)

65. Examine the output of the ‘get router info bgp summary’ command shown in the exhibit; then answer the question below.





Which statements are true regarding the output in the exhibit? (Choose two.)

66. Refer to the exhibit, which shows a hub and spokes deployment.





An administrator is deploying several spokes, including the BGP configuration for the spokes to connect to the hub.

Which two commands allow the administrator to minimize the configuration? (Choose two.)

67. Examine the output of the ‘diagnose ips anomaly list’ command shown in the exhibit; then answer the question below.





Which IP addresses are included in the output of this command?

68. In which order are firewall policies processed on a FortiGate unit?

69. What does DHCP snooping MAC verification do?

70. Refer to the exhibit, which shows an ADVPN network.





The client behind Spoke-1 generates traffic to the device located behind Spoke-2.

What is the first message that the hub sends to Spoke-1 to bring up the dynamic tunnel?

71. Examine the output from the 'diagnose debug authd fsso list' command; then answer the question below.

# diagnose debug authd fsso list--FSSO logons-IP: 192.168.3.1 User: STUDENT Groups:TRAININGAD/USERS Workstation: INTERNAL2. TRAINING. LAB The IP address 192.168.3.1 is NOT the one used by the workstation INTERNAL2. TRAINING. LAB.

What should the administrator check?

72. When does a RADIUS server send an Access-Challenge packet?

73. In which two ways does FortiManager function when it is deployed as a local FDS? (Choose two.)

74. Which statement about memory conserve mode is true?

75. When investigating FortiGuard connectivity issues, which action is a valid troubleshooting step?

76. An administrator has been assigned the task of creating a set of firewall policies which must be evaluated before any custom policies defined within the policy packages of managed FortiGate devices, across all 25 ADOMSs in FortiManager.

How should the administrator accomplish this task?

77. Examine the output of the ‘get router info ospf interface’ command shown in the exhibit; then answer the question below.





Which statements are true regarding the above output? (Choose two.)

78. Which three tasks are part of the manual registration process for adding a FortiGate device to FortiManager for central management? (Choose three.)

79. In which two states is a given session categorized as ephemeral? (Choose two.)

80. Refer to the exhibit, which shows partial outputs from two routing debug commands.





Which change must an administrator make on FortiGate to route web traffic from internal users to the internet, using ECMP?

81. Refer to the exhibit, which shows an OSPF network.





Which configuration must the administrator apply to optimize the OSPF database?