FCSS_NST_SE-7.6

Review 47 FCSS-NST-SE-7-6 practice questions with answer explanations and community insights.

Question 1

Refer to the exhibit. Partial output of FortiOS kernel slabs The partial output of FortiOS kernel slabs is shown. Which statement about total slab size is true?

  1. The total slab size of the ip6_session slab is 1472 kB and is associated with the kernel.
  2. The total slab size of the ip_session slab is 14080 kB and is associated with the user space.
  3. The total slab size of the UDPv6 slab is 14080 kB and is associated with the user space.
  4. The total slab size of the tcp_session slab is 7500 kB and is associated with the kernel.

Question 2

Refer to the exhibit. The partial output of diagnose sys session stat command is shown. Which statement about the output shown in the exhibit is correct?

  1. 27 sessions have expired but are still in the session table in case any out-of-order packets arrive.
  2. 562 TCP sessions have their proto_state set to 01 if there is no inspection.
  3. There have been 131072 recorded ephemeral sessions but there are no current ones.
  4. 113 sessions have been dropped because of memory page exhaustion.

Question 3

Refer to the exhibit. High Availability configuration status Which two statements about the output are true considering NGFW-1 and NGFW-2 have been up for a week? (Choose two.)

  1. If a configuration change is made to the secondary FortiGate, the Configuration Status will not change.
  2. If a configuration change is made to the primary FortiGate at this time, the secondary will initiate a synchronization reset.
  3. If FGVM...649 is rebooted, FGVM...650 will become the primary FortiGate and retain that role, even after FGVM...649 rejoins the cluster.
  4. If port7 becomes disconnected on the secondary FortiGate, both FortiGate devices will elect themselves as primary.

Question 4

Refer to the exhibit. Network topology and a partial routing table Network topology and a partial routing table is shown. FortiGate has already been configured with a firewall policy that allows all ICMP traffic to flow from port1 to port3. Which two changes can the administrator perform to ensure the server at 10.4.0.1/24 receives the echo reply from the laptop at 10.1.0.1/24? (Choose two.)

  1. Modify the default gateway on the laptop from 10.1.0.2 to 10.1.0.254.
  2. Change the FortiGate configuration from strict RPF check mode to feasible RPF check mode.
  3. Enable asymmetric routing under config system settings.
  4. Add a default static route on FortiGate to forward all traffic to port3.

Question 5

Refer to the exhibits. Exhibit 1 - Exhibit 2 - The configuration on FortiGate and partial internet session information from a user on the internal network are shown. An administrator would like to test session failover between the two service provider connections. Which two changes must the administrator make to force this existing session to immediately start using the other interface? (Choose two.)

  1. Modify the distance of the port1 route to 1.
  2. Change the priority of the port1 static route to 11.
  3. Configure set snat-route-change enable.
  4. Change the priority of the port2 static route to 5.
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.