Online Access Free FCSS_EFW_AD-7.4 Exam Questions

While configuring the BGP protocol, an administrator applies the set network-import-check disable command under config network.
What will FortiGate do as a result of this command?

• A.FortiGate will advertise only the corresponding prefixes in the BGP network table to its BGP neighbor, even if it is not in the routing table.
• B.FortiGate will advertise all the prefixes in the BGP network table to its BGP neighbor, even if it is not in the routing table.
• C.FortiGate will not advertise the prefixes, if it is not in the routing table.
• D.FortiGate will not advertise any imported routes received from one BGP neighbor to another.

Refer to the exhibit, which shows a LAN interface connected from FortiGate to two FortiSwitch devices.

What two conclusions can you draw from the corresponding LAN interface? (Choose two.)

• A.This connection is using a FortiLInk to manage VLANs on FortiGate.
• B.You must enable STP or RSTP on FortiGate and FortiSwitch to avoid layer 2 loopbacks.
• C.FortiGate is using an SD-WAN-type interface to connect to a FortiSwitch device with MCLAG.
• D.The LAN interface must use a 802.3ad type interface.

An administrator configured the following command on FortiGate.
config router ospf
set restart-mode graceful-restart
Which two statements correctly describe the result of the above command? (Choose two.)

• A.The OSPF neighbor that receives the grace link-state advertisement (LSA) will enter into helper mode.
• B.FortiGate is configured with graceful restart, and will exit graceful mode, if the network topology changes.
• C.After the default 40 seconds wait time, the OSPF neighbors will resume communication with the restarting router.
• D.In an HA cluster, FortiGate devices will keep the OSPF routes in their routing table to avoid traffic interruption during an HA failover.

Refer to the exhibit, which shows a network diagram showing the addition of site 2 with an overlapping network segment to the existing VPN IPsec connection between the hub and site 1.

Which IPsec phase 2 configuration must an administrator make on the FortiGate hub to enable equal-cost multi-path (ECMP) routing when multiple remote sites connect with overlapping subnets?

• A.Set route-overlap to either use-new or use-old
• B.Set net-device to ecmp
• C.Set route-overlap to allow
• D.Set single-source to enable

Refer to the exhibit, which shows a partial enterprise network.

An administrator would like the area 0.0.0.0 to detect the external network.
What must the administrator configure?

• A.Configure a distribute-route-map-in on FortiGate B.
• B.Enable RIP redistribution on FortiGate B.
• C.Configure a virtual link between FortiGate A and B.
• D.Set the area 0.0.0.l type to stub on FortiGate A and B.