Free Fortinet FCSS_NST_SE-7.6 Practice Exam with Questions & Answers | Set: 2

Remote registry is not running on the workstation.

The user's status shows as "not verified" in the collector agent.

DNS resolution is unable to resolve the workstation name.

The FortiGate firmware version is not compatible with that of the collector agent.

A firewall is blocking traffic to port 139 and 445.

If a configuration change is made to the primary FortiGate at this time, the secondary will initiate a synchronization reset.

If port 7 becomes disconnected on the secondary, both FortiGate devices will elect itself as primary.

If FGVM...649 is rebooted. FGVM...650 will become the primary and retain that role, even after FGVM...649 rejoins the cluster.

If no action is taken, the primary FortiGate will leave the cluster because of the current sync status.

Perfect Forward Secrecy (PFS) is enabled in the configuration.

The local gateway IP address is 10.0.0.1.

It shows a phase 2 negotiation.

The initiator provided remote as its IPsec peer ID.

Both IKEv1 and IKEv2 share the feature of asymmetric authentication.

IKEv1 and IKEv2 have enough of the header format in common that both versions can run over the same UDP port.

IKEv1 and IKEv2 use same TCP port but run on different UDP ports.

IKEv1 and IKEv2 share the concept of phase1 and phase2.

IKE_SA_INIT

INFORMATIONAL

CREATE_CHILD_SA

IKE_Auth

Strict RPF is enabled by default.

User B: Fail. There is no route to 95.56.234.24 using wan2 in the routing table.

User A: Pass. The default static route through wan1 passes the RPF check regardless of the source IP address.

User B: Pass. FortiGate will use asymmetric routing using wan1 to reply to traffic for 95.56.234.24.

User C: Fail. There is no route to 10.0.4.63 using port1 in the touting table.

The Hello packet is being sent from an OSPF router with ID 0.0.0.112.

The two FortiGate devices attempting adjacency are in area 0.0.0.0.

One FortiGate device is configured to require authentication, while the other is not.

The passwords on the FortiGate devices do not match.

The user was found in the LDAP tree, whose root is TAC.ottawa.fortinet.com.

FortiOS performs a bind to the LDAP server using the user's credentials.

FortiOS collects the user group information.

FortiOS is performing the second step (Search Request) in the LDAP authentication process.

Set snat-route-change to enable.

Set the priority of the static default route using port2 to 1.

Set preserve-session-route to enable.

Set the priority of the static default route using port1 to 10.