Question 1

Refer to the exhibit, which shows the output of a debug command.

What can be concluded from the debug command output?

Options :

A : The OSPF router with the ID 0.0.0.69 has its OSPF priority set to 0.

B : The local FortiGate has a different MTU value from the OSPF router with ID 0.0.0.2, based on the state information.

C : There are more than two OSPF routers on the wan2 network.

D : The interface ToRemote is a broadcast OSPF network.

Answer: C

Question 2

Which three steps are executed to get antivirus and IPS updates using the pull method? (Choose three.)

Options :

A : FortiGate starts sending rating queries to one of the servers in the list.

B : FortiGate periodically queries for pending updates.

C : FortiGate gets a list of server IP addresses that can be contacted.

D : FortiGate contacts a DNS server to resolve the FortiGuard domain name.

Answer: A,B,D

Question 3

Refer to the exhibit, which contains partial output from an IKE real-time debug.

Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?

Options :

A : auto-discovery-receiver

B : auto-discovery-forwarder

C : auto-discovery-shortcut

D : auto-discovery-sender

Answer: D

Question 4

Which two statements about OCVPN are true? (Choose two.)

Options :

A : Only root vdom supports OCVPN.

B : OCVPN supports static and dynamic IPs in WAN interface.

C : OCVPN offers only Hub-Spoke VPNs.

D : FortiGate devices under different FortiCare accounts can be used to form OCVPN.

Answer: A,B

Question 5

Refer to the exhibit.

An administrator is deploying a hub and spokes network and using OSPF as dynamic protocol. Which configuration is mandatory for neighbor adjacency?

Options :

A : Set bfd enable in the router configuration

B : Set network-type point-to-multipoint in the hub interface

C : Set rfc1583-compatible enable in the router configuration

D : Set virtual-link enable in the hub interface

Answer: B

Smartly Prepare Exam with Free Online FCSS_EFW_AD-7.4 Practice Test