Free FCSS – Network Security 7.4 Support Engineer Exam FCSS_NST_SE-7.4 Exam Practice Test

Which exchange lakes care of DoS protection in IKEv2?

• Create_CHILD_SA
• IKE_Auth
• IKE_Req_INIT
• IKE_SA_NIT

Which two statements about conserve mode are true? (Choose two.)

• FortiGate enters conserve mode when the system memory reaches the configured extreme threshold.
• FortiGate starts taking the configured action for new sessions requiring content inspection when the system memory reaches the configured red threshold.
• FortiGate exits conserve mode when the system memory goes below the configured green threshold.
• FortiGate starts dropping all new sessions when the system memory reaches the configured red threshold.

Which two statements about an auxiliary session ate true? (Choose two.)

• With the auxiliary session selling disabled, only auxiliary sessions are ofloaded.
• With the auxiliary session setting enabled. ECMP traffic is accelerated to the NP6 processor.
• With the auxiliary session setting enabled. Iwo sessions are created in case of routing change.
• With the auxiliary session setting disabled, for each traffic path. FortiGate uses the same auxiliary session.

What are two reasons you might see iprope_in_check() check failed, drop when using the debug flow? (Choose two.)

• Packet was dropped because of policy route misconfiguration.
• Packet was dropped because of traffic shaping.
• Trusted host list misconfiguration.
• VIP or IP pool misconfiguration.

An administrator wants to capture encrypted phase 2 traffic between two FotiGate devices using the built-in sniffer.If the administrator knows that there Is no NAT device located between both FortiGate devices, which command should the administrator run?

• diagnose sniffer packet any 'udp port 500'
• diagnose sniffer packet any 'lp proto 50'
• diagnose sniffer packet any 'udp port 4500'
• diagnose sniffer packet any 'ah'

Which statement about protocol options is true?

• Protocol options allow administrators to configure a maximum number of sessions for each configured protocol.
• Protocol options give administrators a streamlined method to instruct FortiGate to block all sessions corresponding to disabled protocols.
• Protocol options allow administrators to configure the Any setting for all enabled protocols, which provides the most efficient use of system resources.
• Protocol options allow administrators to configure which Layer 4 port numbers map to upper-layer protocols, such as HTTP, SMTP, FTP, and so on.

Which two statements are true regarding heartbeat messages sent from an FSSO collector agent to FortiGate? (Choose two.)

• The heartbeat messages can be seen using the command diagnose debug authd fsso list.
• The heartbeat messages can be seen in the collector agent logs.
• The heartbeat messages can be seen on FortiGate using the real-lime FSSO debug.
• The heartbeat messages must be manually enabled on FortiGate.

Which statement about IKEv2 is true?

• Both IKEv1 and IKEv2 share the feature of asymmetric authentication.
• IKEv1 and IKEv2 have enough of the header format in common that both versions can run over the same UDP port.
• IKEv1 and IKEv2 use same TCP port but run on different UDP ports.
• IKEv1 and IKEv2 share the concept of phase1 and phase2.

In IKEv2, which exchange establishes the first CHILD_SA?

• IKE_SA_INIT
• INFORMATIONAL
• CREATE_CHILD_SA
• IKE_Auth

In which two slates is a given session categorized as ephemeral? (Choose two.)

• A UDP session with only one packet received
• A UOP session with packets sent and received
• A TCP session waiting for the SYN ACK
• A TCP session waiting for FIN ACK