FCSS_NST_SE-7.4 FCSS - Network Security 7.4 Support Engineer Questions and Answers

FortiGate uses the SNI from the user's web browser.

FortiGate closes the connection because this represents an invalid SSL/TLS configuration.

FortiGate uses the first entry listed in the SAN field in the server certificate.

FortiGate uses the ZN information from the Subject field in the server certificate.

The workstation with IP 10.124.2.90 will be polled frequently using TCP port 445 to see if the user is still logged on.

The logon event can be seen on the collector agent installed on Windows.

FSSO is using DC agent mode to detect logon events.

FSSO is using agentless polling mode to detect logon events.

The name of the configured LDAP server is Lab.

The user is authenticating using CN=John Smith.

FortiOS is able to locate the user in step 3 (Bind Request) of the LDAP authentication process.

FortiOS is performing the second step (Search Request) in the LDAP authentication process.

The advertised prefix of 10.20.30.0'24 was configured using the network command.

The first four prefixes are being advertised using a legacy route advertisement.

The advertised prefix of 10.20.30.0'24 is being advertised through the redistribution of another routing protocol.

The output shows all prefixes advertised by all neighbors as well as the local router.

Return traffic to the initiator is sent to 10.1.0.1.

Return traffic to the initiator is sent lo 10.200.1.254.

It is an ICMP session from 10.1.10.10 to 10.200.1.1.

It is an ICMP session from 10.1.10.1 to 10.200.5.1.

An ISDB route

A regular policy route

A regular policy route, which is associated with an active static route in the FIB

AnSD-WAN rule

FortiGate allows the connection, based on the URL Filter configuration.

FortiGate blocks the connection as an invalid URL.

FortiGate exempts the connection, based on the Web Content Filter configuration.

FortiGate blocks the connection, based on the FortiGuard category based filter configuration.

The router 100.64.3.1 needs to update the local AS number in its BGP configuration in order to bring up the 8GP session with the local router.

An inbound route-map on local router is blocking the prefixes from neighbor 100.64.3.1.

All of the neighbors displayed are part of a single BGP configuration on the local router with the neighbor-range set to a value of 4.

The BGP session with peer 10.127.0.75 is up.

FortiTelemetry and Neighbor Discovery both operate using TCP.

The default port for Neighbor Discovery can be modified.

FortiTelemetry must be manually enabled on the FortiGate interface.

By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.