Fortinet NSE7_NST-7.2 Quiz 1 Topic 1 Questions 1-5

Question: 1

Which exchange lakes care of DoS protection in IKEv2?

AIKE_Req_INIT

BIKE_SA_INIT

CIKE_Auth

DCreate_CHILD_SA

Show Answer

Question: 2

Refer to the exhibit, which shows a session table entry.

q2_NSE7_NST-7.2

Which statement about FortiGate behavior relating to this session is true?

AFortiGate forwarded this session without any inspection.

BFortiGate is performing a security profile inspection using the CPU.

CFortiGate redirected the client to the captive portal to authenticate, so that a correct policy match could be made.

DFortiGate applied only IPS inspection to this session.

Show Answer

Question: 3

Consider the scenario where the server name indication (SNI) does not match either the common name (CN) or any of the subject alternative names (SAN) in the server certificate. Which action will FortiGate take when using the default settings for SSL certificate inspection?

AFortiGate closes the connection because this represents an invalid SSL/TLS configuration

BFortiGate uses the 31 information from the Subject field in the server certificate.

CFortiGate uses the first entry listed in the SAN field in the server certificate.

DFortiGate uses the SNI from the user's web browser.

Show Answer

Question: 4

Which three common FortiGate-to-collector-agent connectivity issues can you identify using the FSSO real-time debug? (Choose three.)

ARefused connection. Potential mismatch of TCP port.

BMismatched pre-shared password.

CInability to reach IP address of the collector agent.

DLog is full on the collector agent.

EIncompatible collector agent software version.

Show Answer

Question: 5

Refer to the exhibit, which contains the partial output of a diagnose command.

q5_NSE7_NST-7.2

Based on the output, which two statements are correct? (Choose two.)

AThe remote gateway IP is 10.200.5.1.

BThe remote gateway has quick more selectors containing a destination subnet of 10.1.2.0/24.

CDPD is disabled.

DAnti-replay is enabled.

Show Answer

Fortinet NSE7_NST-7.2 Quiz:1 Topic:1 Questions:1-5