Free Fortinet FCSS_NST_SE-7.4 Exam Dumps Questions & Answers

Refer to the exhibit, which shows a partial output of the fssod daemon real-time debug command.

What two conclusions can you draw Itom the output? (Choose two.)

• A.The workstation with IP 10.124.2.90 will be polled frequently using TCP port 445 to see if the user is still logged on.
• B.FSSO is using DC agent mode to detect logon events.
• C.FSSO is using agentless polling mode to detect logon events.
• D.The logon event can be seen on the collector agent installed on Windows.

Which exchanges are the first two exchanges in IKEv2 negotiation?

• A.Init_Req and Wait_Init_Req
• B.INIT_Req and Auth_Request
• C.Key Exchange and Authentication
• D.IKE SA_INIT and IKE_Auth

Refer to the exhibit. Antivirus is unable to detect an infected file downloaded through HTTPS. Part of the configuration used for antivirus inspection is shown in the exhibit.
Which configuration changes can be performed to inspect HTTPS?

• A.Enable SSL deep inspection.
• B.Set a different antivirus database.
• C.Increase the maximum number of subdirectories and nested archives.
• D.Disable the emulatorsetting.

Refer to the exhibit, which contains the output of a debug command.

If the default settings are in place, what can you conclude about the conserve mode shown in the exhibit?

• A.FortiGate is currently allowing new sessions that require flow-based or proxy-based content inspection and is performing inspection on those sessions.
• B.FortiGate is currently allowing new sessions that require flow-based content inspection and blocking sessions that require proxy-based content inspection.
• C.FortiGate is currently allowing new sessions that require flow-based or proxy-based content inspection but is not performing inspection on those sessions.
• D.FortiGate is currently blocking all new sessions regardless of the content inspection requirements or configuration settings because of high memory use.

Refer to the exhibit, which contains a screenshot of some phase 1 settings. The VPN is not up.
To diagnose the issue, the administrator enters the following CLI commands on an SSH session on FortiGate:

However, the IKE real-time debug does not show any output. Why?

• A.The log-filter setting is incorrect. The VPN traffic does not match this filter.
• B.Replace diagnose debug application ike -1 with diagnose debug application ipsec -1.
• C.The administrator must also run the command diagnose debug enable.
• D.The debug shows only error messages. If there is no output, then the phase 1 and phase 2 configurations match.