FCSS_NST_SE-7.6 試験問題を無料オンラインアクセス

Refer to the exhibit, which shows the output of a real-time debug. Which statement about this output is true?
(Choose one answer)

• A.The server hostname was extracted from the SNI in the client request, or from the CN in the server certificate.
• B.This web request was inspected using the ftgd-allow web filter profile.
• C.FortiGate found the requested URL in its local cache.
• D.The requested URL belongs to category ID 255.

Refer to the exhibit.

The exhibit shows the output of a session. Which two statements are correct? (Choose two.)

• A.The gateway to the destination is 10.1.10.1.
• B.The session was initiated from an authenticated user.
• C.The TCP session has been successfully established.
• D.The session did not match a firewall policy.

Refer to the exhibit.

The output of diagnose sys session list command is shown.
If the HA ID for the primary device is 9, what happens if the primary fails and the secondary becomes the primary?

• A.The session state is preserved but the kernel will re-evaluate the session because the routing information will be flushed
• B.The session will be removed from the session table of the secondary device because the TCP session is not yet fully established.
• C.The session is synchronized with the secondary device, however, because application control is applied.
  the session is marked dirty and has to be reevaluated after failover.
• D.The session continues to permit traffic on the new primary device after failover. without requiring the client to restart the session with the server.

What can cause an IKEv2 tunnel to go down after it was initially brought up successfully?

• A.A mismatched pre-shared key was detected during the IKE_AUTH exchange.
• B.A mismatched proposal was detected during the IKE_AUTH exchange.
• C.A mismatched Diffie-Hellman group was detected during the IKE_SA_INIT exchange.
• D.Mismatched traffic selectors (phase 2 / "quick-mode selectors") were detected during the CREATE_CHILD_SA exchange.

Refer to the exhibit.

The output of the command diagnose vpn tunnel list is shown.
Reviewing the debug command, what is the current status of the traffic flowing through the tunnel?

• A.The outbound IPsec SA was copied to the NPU.
• B.The inbound and outbound IPsec SAs were copied to the NPU.
• C.The inbound IPsec SA was copied to the NPU.
• D.NP6 is handling the offloading.