Free Fortinet FCSS_NST_SE-7.4 Exam Dumps Questions & Answers

Refer to the exhibit, which shows one way communication of the downstream FortiGate with the upstream FortiGate within a Security Fabric.

What three actions must you take to ensure successful communication? (Choose three.)

• A.  You must enable Security Fabric/Fortitelemetry on the receiving interface of the upstream FortiGate.
• B.  Ensure TCP port 8013 is not blocked along the way.
• C.  FortiGate must not be in NAT mode.
• D.  Ensure the port for Neighbor Discovery has been changed.
• E.  You must authorize the downstream FortiGate on the root FortiGate.

Refer to the exhibit, which shows a partial output of diagnose npu np6 port-liston FortiGate 2000E.

An administrator is unable to analyze traffic flowing between port1 and port17 using the diagnose sniffercommand.
Which two commands allow the administrator to view the traffic? (Choose two.) config firewall policy

• A.  set fastpath disable
  end
  diagnose npu np6 port-list disable 5 17
• B.  edit 5
  set auto-asic-offload disable
  end
  next
• C.  diagnose npu np6 fastpath disable 1
• D.  edit 17
  set auto-asic-offload disable
  end
  config system npu

Which authentication option can you not configure under config user radius on FortiOS?

• A.  mschap
• B.  pap
• C.  mschap2
• D.  eap

Refer to the exhibit, which shows a partial output of a real-time LDAP debug.

What two conclusions can you draw from the output? (Choose two.)

• A.  The user was found in the LDAP tree, whose root is TAC.ottawa.fortinet.com.
• B.  FortiOS collects the user group information.
• C.  FortiOS is performing the second step (Search Request) in the LDAP authentication process.
• D.  FortiOS performs a bind to the LDAP server using the user's credentials.

Refer to the exhibit, which shows the output of a debug command.

What needs to happen for the local router to be elected DR?

• A.  Both the DR and BDR will have to fail before the local router will be elected DR.
• B.  The local router will be elected DR if the current DR fails because it has a higher router ID than the BDR.
• C.  The local router will be elected DR only if re-election occurs and its router ID is highest, assuming equal priority.
• D.  The local router will never be elected DR.