FCSS_NST_SE-7.6

FCSS_NST_SE-7.6 practice questions, page 2 of 2, with answer review and explanations.

Question 6

Refer to the exhibit. The output of a BGP debug command is shown. Why has the local router at 172.16.23.58 been unable to establish adjacency with its only neighbor?

  1. The local router has not received an OPEN message from the neighbor.
  2. There is no active route to the BGP neighbor.
  3. The neighbor router has become unreachable, which is evident by the low ratio of messages received to messages sent.
  4. The local router has not received a SYN/ACK packet from the neighbor.

Question 7

Which two statements about Security Fabric communications are true? (Choose two.)

  1. The default ports for FortiTelemetry and Neighbor Discovery can be modified.
  2. Security Fabric communication is enabled by default among all Fortinet devices.
  3. FortiTelemetry must be manually enabled on the FortiGate interface.
  4. By default, the downstream FortiGate establishes a connection with the upstream FortiGate using TCP port 8013.

Question 8

Refer to the exhibit. Debug output - The output of the command diagnose vpn tunnel list is shown. Reviewing the debug command, what is the current status of the traffic flowing through the tunnel?

  1. NP6 is handling the offloading.
  2. The inbound IPsec SA was copied to the NPU.
  3. The outbound IPsec SA was copied to the NPU.
  4. The inbound and outbound IPsec SAs were copied to the NPU.

Question 9

Refer to the exhibit. Which three pieces of information does the diagnose sys top command provide? (Choose three.)

  1. The miglogd daemon is running on CPU core ID 0.
  2. The cmdbsvr process is occupying 2.4% of the total user memory space.
  3. The diagnose sys top command has been running for 18 minutes.
  4. If the newcli daemon continues to be in the R state, it will need to be manually restarted.
  5. The miglogd daemon would be on top of the list, if the administrator pressed m on the keyboard.