Fortinet FCSS_EFW_AD-7.4 Study Guide Archives Updated on Jan 09, 2025 [Q49-Q63]

QUESTION 49
Examine the output from the BGP real time debug shown in the exhibit, then the answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

QUESTION 50
Refer to the exhibit, which shows a partial routing table.

Assuming all the appropriate firewall policies are configured, what two changes would an administrator need to make if they wanted to send traffic from a client directly connected to port3, to a server directly connected to port4? (Choose two.)

QUESTION 51
Refer to the exhibit, which shows partial outputs from two routing debug commands.


Why is the port2 default route not in the second command output?

QUESTION 52
Which statement about NGFW policy-based application filtering is true?

QUESTION 53
View the exhibit, which contains the output of a diagnose command, and then answer the question below.

Which statements are true regarding the output in the exhibit? (Choose two.)

QUESTION 54
Refer to the exhibit, which contains partial output from an IKE real-time debug.


The administrator does not have access to the remote gateway.
Based on the debug output, which configuration change can the administrator make to the local gateway to resolve the phase 1 negotiation error?

QUESTION 55
An administrator is running the following sniffer in a FortiGate:
diagnose sniffer packet any “host 10.0.2.10” 2
What information is included in the output of the sniffer? (Choose two.)

QUESTION 56
Which two statements correctly describe the characteristics of the Fortinet Security Fabric? (Choose two.)

QUESTION 57
The logs in a FSSO collector agent (CA) are showing the following error:
failed to connect to registry: PIKA1026 (192.168.12.232)
What can be the reason for this error?

QUESTION 58
One firewall policy in an enterprise firewall is essentially used for IPS.
Which configuration must the administrator check in this firewall policy to validate optimum performance for IPS?

QUESTION 59
View the exhibit, which contains the output of diagnose sys session list, and then answer the question below.

If the HA ID for the primary unit is zero (0), which statement is correct regarding the output?

QUESTION 60
When does a RADIUS server send an Access-Challenge packet?

QUESTION 61
Which of the following conditions must be met for a static route to be active in the routing table?
(Choose three.)

QUESTION 62
Which two conditions would prevent a static route from being added to the routing table? (Choose two.)

QUESTION 63
Which real time debug should an administrator enable to troubleshoot RADIUS authentication problems?