Fortinet FCSS_NST_SE-7.6 - Fortinet NSE 6 - Network Security 7.6 Support Engineer Exam
Page: 3 / 14
Total 70 questions
Question #11 (Topic: Exam A)
What are two functions of automation stitches? (Choose two.)
A. You can configure automation stitches to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.
B. You can configure automation stitches to insert a delay between actions if the automation stiches are set to execute actions in parallel.
C. You can configure automation stitches to modify packet headers and payloads if specific traffic triggers an anomaly IPS event.
D. You can configure automation stitches to take parameters from previous actions as input for the next action if the automation stitches are set to execute actions in sequence.
Answer: AD
Question #12 (Topic: Exam A)
During the SAML negotiation process, in which section does the identity Provider (IdP) provide the SAML attributes utilized in the authentication process to the service provider (SP)?
A. Assertion dump
B. Bindings HTTP post
C. Authentication request
D. Authentication response
Answer: D
Question #13 (Topic: Exam A)
Refer to the exhibit.
Two entries that were generated in the FSSO collector agent log is shown.
Which three conclusions can you draw from these log entries? (Choose three.)
Two entries that were generated in the FSSO collector agent log is shown.
Which three conclusions can you draw from these log entries? (Choose three.)
A. Remote registry is not running on the workstation.
B. The user’s status shows as “not verified” in the collector agent.
C. DNS resolution is unable to resolve the workstation name.
D. A firewall is blocking traffic to port 139 and 445.
E. The logged on user is part of a group that is not configured in the group filter.
Answer: ABD
Question #14 (Topic: Exam A)
Refer to the exhibit.
Network topology and a partial routing table
Network topology and a partial routing table is shown.
FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3.
Which two changes can the administrator perform to ensure the server at 10.4.0.1/24 receives the echo reply from the laptop at 10.1.0.1/24? (Choose two.)
Network topology and a partial routing table
Network topology and a partial routing table is shown.
FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3.
Which two changes can the administrator perform to ensure the server at 10.4.0.1/24 receives the echo reply from the laptop at 10.1.0.1/24? (Choose two.)
A. Modify the default gateway on the laptop from 10.1.0.2 to 10.1.0.254.
B. Change the FortiGate configuration from strict RPF check mode to feasible RPF check mode.
C. Enable asymmetric routing under config system settings.
D. Add a default static route on FortiGate to forward all traffic to port3.
Answer: AB
Question #15 (Topic: Exam A)
Refer to the exhibit.
The output of the get router info bgp summary command is shown.
Which statement regarding adjacencies between the local router and its neighbors is correct?
The output of the get router info bgp summary command is shown.
Which statement regarding adjacencies between the local router and its neighbors is correct?
A. The local router and neighbor 100.64.2.254 are unable to establish adjacency because AS 100 is already used by neighbor 100.64.1.254.
B. The local router and neighbor 100.64.2.254 are unable to establish adjacency until the adjacency with neighbor 100.64.1.254 ceases.
C. The local router and neighbor 100.64.2.254 are unable to establish adjacency because the TCP session could not be established.
D. The local router and neighbor 100.64.1.254 established adjacency because the priority of 100.64.1.254 is higher than that of 100.64.2.254.
Answer: C
