FCSS_NST_SE-7.4 Exam Dumps - FCSS - Network Security 7.4 Support Engineer

Go to page:

Question # 4

Which two statements are true regarding heartbeat messages sent from an FSSO collector agent to FortiGate? (Choose two.)

The heartbeat messages can be seen using the command diagnose debug authd fsso list.

The heartbeat messages can be seen in the collector agent logs.

The heartbeat messages can be seen on FortiGate using the real-lime FSSO debug.

The heartbeat messages must be manually enabled on FortiGate.

Full Access

Question # 5

Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate.

Which action will FortiGate take when using the default settings for SSL certificate inspection?

FortiGate uses the SNI from the user's web browser.

FortiGate closes the connection because this represents an invalid SSL/TLS configuration.

FortiGate uses the first entry listed in the SAN field in the server certificate.

FortiGate uses theCN information from the Subject field in the server certificate.

Full Access

Question # 6

Refer to the exhibit, which shows the partial output of FortiOS kernel slabs.

Which statement is true?

The total slab size of the sctp_session slab is 0 kB and is associated with the user space.

The total slab size of the ip_session slab is 3600 kB and is associated with the user space.

The total slab size of the ip6_session slab is 1300 kB and is associated with the kernel.

The total slab size of the tcp_session slab is 7500 kB and is associated with the kernel.

Full Access

Question # 7

Refer to the exhibit showing a debug output.

An administrator deployed FSSO in DC Agent Mode but FSSO is failing on FortiGate. Pinging FortiGate from where the collector agent is deployed is successful.

The administrator then produces the debug output shown in the exhibit.

What could be causing this error message?

The TCP port 445 is blocked between FortiGate and collector agent.

The collector agent preshared password is mismatched.

The FortiGate cannot resolve the active directory server name.

The FortiGate and the collector agent are using different TCP ports.

Full Access

Question # 8

Refer to the exhibit, which shows the output of get router info ospf neighbor.