FCSS_EFW_AD-7.4 Tested & Approved Fortinet Certified Solution Specialist Study Materials [Q45-Q65]

5/5 - (1 vote)

FCSS_EFW_AD-7.4 Tested & Approved Fortinet Certified Solution Specialist Study Materials

Validate your Skills with Updated Fortinet Certified Solution Specialist Exam Questions & Answers and Test Engine

QUESTION 45
Which statement about the designated router (DR) and backup designated router (BDR) in an OSPF multi-access network is true?

Only the DR receives link state information from non-DR routers.

Non-DR and non-BDR routers form full adjacencies to DR only.

Non-DR and non-BDR routers send link state updates and acknowledgements to 224.0.0.6.

FortiGate first checks the OSPF ID to elect a DR.

QUESTION 46
Which statement about NGFW policy-based application filtering is true?

After the application has been identified, the kernel uses only the Layer 4 header to match the traffic.

FortiGate will drop all packets until the application can be identified.

After IPS identifies the application, it adds an entry to a dynamic ISDB table.

The IPS security profile is the only security option you can apply to the security policy with the action set to ACCEPT.

QUESTION 47
An administrator wants to simplify a new hub-and-spoke network deployment with the BGP recommended configuration.
Which two sections on FortiManager must the administrator use? (Choose two.)

Provisioning Templates

Meta Fields

Metadata Variables

Automation Stitch

QUESTION 48
What are two functions of automation stitches? (Choose two.)

Automation stitches can be configured on any FortiGate device in a Security Fabric environment.

An automation stitch configured to execute actions sequentially can take parameters from previous actions as input for the current action.

Automation stitches can be created to run diagnostic commands and attach the results to an email message when CPU or memory usage exceeds specified thresholds.

An automation stitch configured to execute actions in parallel can be set to insert a specific delay between actions.

QUESTION 49
Which two statements about an auxiliary session are true? (Choose two.)

With the auxiliary session setting enabled, ECMP traffic is accelerated to the NP6 processor.

With the auxiliary session setting disabled, for each traffic path, FortiGate will use the same auxiliary session.

With the auxiliary session disabled, only auxiliary sessions will be offloaded.

With the auxiliary session setting enabled, two sessions will be created in case of routing change.

QUESTION 50
Which three conditions are required for two FortiGate devices to form an OSP adjacency? (Choose three.)

OSPF costs match

OSPF peer IDs match

Hello and dead intervals match

OSPF IP MTUs match

IP addresses are in the same subnet

QUESTION 51
Which two events can trigger an HA failover? (Choose two.)

The failure of a solid-state drive

The physical disconnection of a heartbeat interface

A configuration sync failure

A session sync failure

QUESTION 52
Refer to the exhibit, which contains the output of a web filtering diagnose command.

Which statement explains why the cache statistics are all zeros?

The FortiGate web filter cache is disabled in the FortiGate configuration.

FortiGate is using flow-based inspection which does not use the cache.

The administrator has reallocated the cache memory to a separate process.

There are no users making web requests.

QUESTION 53
Examine the following traffic log; then answer the question below.
date-20xx-02-01 time=19:52:01 devname=masterdevice_id=”xxxxxxx” log_id=0100020007 type=event subtype=system pri critical vd=root service=kemel status=failure msg=”NAT port is exhausted.” What does the log mean?

There is not enough available memory in the system to create a new entry in the NAT port table.

The limit for the maximum number of simultaneous sessions sharing the same NAT port has been reached.

FortiGate does not have any available NAT port for a new connection.

The limit for the maximum number of entries in the NAT port table has been reached.

QUESTION 54
Which three conditions are required for two FortiGate devices to form an OSPF adjacency? (Choose three.)

OSPF interface network types match.

OSPF router IDs are unique.

OSPF interface priority settings are unique.

Authentication settings match.

OSPF link costs match.

QUESTION 55
An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device.
What can the administrator do to fix this problem?

Configure remote link monitoring to detect an issue in the forwarding path.

Configure set send-garp-on-failover enable under config system ha on both cluster members.

Verify that the speed and duplex settings match between the FortiGate interfaces and the connected switch ports.

Configure set link-failed-signal enable under config system ha on both cluster members.

QUESTION 56
Which of the following conditions must be met for a static route to be active in the routing table?
(Choose three.)

The next-hop IP address is up.

There is no other route, to the same destination, with a higher distance.

The link health monitor (if configured) is up.

The next-hop IP address belongs to one of the outgoing interface subnets.

The outgoing interface is up.

QUESTION 57
An administrator is deploying APs that are connecting over an IPsec network. All APs have been configured to connect to FortiGate manually. FortiGate can discover the APs and authorize them.
However, FortiGate is unable to establish CAPWAP tunnels to manage the APs.
Which configuration setting can the administrator perform to resolve the problem?

Decrease the CAPWAP tunnel MTU size for APs to prevent fragmentation

Enable CAPWAP administrative access on the IPsec interface

Upgrade the FortiAP firmware image to ensure compatibility with the FortiOS version

Assign a custom AP profile for the remote APs with the set mpls-connection option enabled

QUESTION 58
A FortiGate’s port1 is connected to a private network. Its port2 is connected to the Internet. Explicit web proxy is enabled in port1 and only explicit web proxy users can access the Internet. Web cache is NOT enabled. An internal web proxy user is downloading a file from the Internet via HTTP.
Which statements are true regarding the two entries in the FortiGate session table related with this traffic? (Choose two.)

Both session have the local flag on.

The destination IP addresses of both sessions are IP addresses assigned to FortiGate’s interfaces.

One session has the proxy flag on, the other one does not.

One of the sessions has the IP address of port2 as the source IP address.

QUESTION 59
View the following exhibit, which contains the sniffer output for a passive mode FTP request.

An administrator has created the following custom IPS signature to block all FTP requests for passive mode: F-SBID (–attack_id 1002; –name “Block.FTP “; –protocol tcp; –flow from_client; –pattern
“PASV”; –no_case;) Soon after the signature is enabled in an active IPS sensor, some false positive detections are generated.
Which option and value pair will allow more specific detection?

–protocol ftp

–service ftp

–name “Block.FTP.PASV”

–attack_id 1001

QUESTION 60
View the IPS exit log, and then answer the question below.

What is the status of IPS on this FortiGate?

IPS engine memory consumption has exceeded the model-specific predefined value.

IPS daemon experienced a crash.

There are communication problems between the IPS engine and the management database.

All IPS-related features have been disabled in FortiGate’s configuration.

QUESTION 61
View the exhibit, which contains the output of a diagnose command, and then answer the question below.

What statements are correct regarding the output? (Choose two.)

This is an expected session created by a session helper

Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next- hop IP address 10.0.1.10

Traffic in the original direction (coming from the IP address 10.171.122.38) will be routed to the next- hop IP address 10.200.1.1.

This is an expected session created by an application control profile.

QUESTION 62
Four FortiGate devices configured for OSPF connected to the same broadcast domain. The first unit is elected as the designated router.
The second unit is elected as the backup designated router.
Under normal operation, how many OSPF full adjacencies are formed to each of the other two units?

QUESTION 63
Exhibits:

Refer to the exhibits, which contain the network topology and BGP configuration for a hub.
An administrator is trying to configure ADVPN with a hub-spoke VPN setup using iBGP. All the VPNs are up and connected to the hub. The hub is receiving route information from both spokes over iBGP; however, the spokes are not receiving route information from each other.
What change must the administrator make to the hub BGP configuration so that the routes learned by one spoke are forwarded to the other spokes?

Configure the hub as a route reflector client.

Change the router id to 10.1.0.254.

Configure an individual neighbor and remove neighbor-range configuration.

Make the configuration of remote-as different from the configuration of local-as.

QUESTION 64
View the exhibit, which contains the sniffer output for a passive mode FTP request, and then answer the question below.

An administrator has created the following custom IPS signature to block all FTP requests for passive mode:
F-SBID (–attack_id 1002; –name “Block.FTP “; –protocol tcp; –flow from_client; –pattern “PASV”; — no_case;) Soon after the signature is enabled in an active IPS sensor, some false positive detections are generated.
Which of the following option and value pairs will allow more specific detection?

–attack_id 1001

–protocol ftp

–name “Block.FTP.PASV

–service ftp

QUESTION 65
Which layer of the FortiOS architecture does an application process or daemon run on?

User space

Configuration layer

Kernel

Hardware

FCSS_EFW_AD-7.4 [Jan-2025] Newly Released] FCSS_EFW_AD-7.4 Exam Questions For You To Pass: https://www.actualcollection.com/FCSS_EFW_AD-7.4-exam-questions.html

Leave a comment Cancel reply