Fortinet FCSS_EFW_AD-7.4 Quiz 1 Topic 1 Questions 1-5

Question: 1

Refer to the exhibit.

q1_FCSS_EFW_AD-7.4

The routing tables of FortiGate_A and FortiGate_B are shown. FortiGate_A and FortiGate_B are in the same autonomous system.

The administrator wants to dynamically add only route 172.16.1.248/30 on FortiGate_A.

What must the administrator configure?

AThe prefix 172.16.1.248/30 in the BGP Networks section on FortiGate_B

BA BGP route map out for 172.16.1.248/30 on FortiGate_B

CEnable Redistribute Connected in the BGP section on FortiGate_B.

DA BGP route map in for 172.16.1.248/30 on FortiGate_A

Show Answer

Question: 2

Refer to the exhibit, which shows a network diagram showing the addition of site 2 with an overlapping network segment to the existing VPN IPsec connection between the hub and site 1.

q2_FCSS_EFW_AD-7.4

Which IPsec phase 2 configuration must an administrator make on the FortiGate hub to enable equal-cost multi-path (ECMP) routing when multiple remote sites connect with overlapping subnets?

ASet route-overlap to either use-new or use-old

BSet net-device to ecmp

CSet single-source to enable

DSet route-overlap to allow

Show Answer

Question: 3

Refer to the exhibit, which shows a corporate network and a new remote office network.

q3_FCSS_EFW_AD-7.4

An administrator must integrate the new remote office network with the corporate enterprise network.

What must the administrator do to allow routing between the two networks?

AThe administrator must implement BGP to inject the new remote office network into the corporate FortiGate device

BThe administrator must configure a static route to the subnet 192.168.l.0/24 on the corporate FortiGate device.

CThe administrator must configure virtual links on both FortiGate devices.

DThe administrator must implement OSPF over IPsec on both FortiGate devices.

Show Answer

Question: 4

An administrator wants to scale the IBGP sessions and optimize the routing table in an IBGP network.

Which parameter should the administrator configure?

Anetwork-import-check

Bibgp-enforce-multihop

Cneighbor-group

Droute-reflector-client

Show Answer

Question: 5

Refer to the exhibits.

q5_FCSS_EFW_AD-7.4

The configuration of a user's Windows PC, which has a default MTU of 1500 bytes, along with FortiGate interfaces set to an MTU of 1000 bytes, and the results of PC1 pinging server 172.16.0.254 are shown.

Why is the user in Windows PC1 unable to ping server 172.16.0.254 and is seeing the message: Packet needs to be fragmented but DF set?

AOption ip.flags.mf must be set to enable on FortiGate. The user has to adjust the ping MTU to 1000 to succeed.

BFragmented packets must be encrypted. To connect any application successfully, the user must install the Fortinet_CA certificate in the Microsoft Management Console.

CFortiGate honors the do not fragment bit and the packets are dropped. The user has to adjust the ping MTU to 972 to succeed.

DThe user must trigger different traffic because path MTU discovery techniques do not recognize ICMP payloads.

Show Answer

Fortinet FCSS_EFW_AD-7.4 Quiz:1 Topic:1 Questions:1-5