Online Access Free FCSS_EFW_AD-7.4 Exam Questions

Refer to the exhibit, which contains the partial output of an OSPF command.

An administrator is checking the OSPF status of a FortiGate device and receives the output shown in the exhibit.
What two conclusions can the administrator draw? (Choose two.)

• A.The FortiGate device has OSPF ECMP enabled
• B.The FortiGate device is a backup designated router
• C.The FortiGate device is connected to multiple areas
• D.The FortiGate device injects external routing information

The IT department discovered during the last network migration that all zero phase selectors in phase 2 IPsec configurations impacted network operations. What are two valid approaches to prevent this during future migrations? (Choose two.)

• A.Clearly indicate to the VPN which segments will be encrypted in the phase two selectors.
• B.Use routing protocols to specify allowed subnets over the tunnel.
• C.Configure an IP address on the IPsec interface of each firewall to establish unique peer connections and avoid impacting network operations.
• D.Configure an IPsec-aggregate to create redundancy between each firewall peer.

An administrator must standardize the deployment of FortiGate devices across branches with consistent interface roles and policy packages using FortiManager. What is the recommended best practice for interface assignment in this scenario?

• A.Create normalized interface types per-platform to automatically recognize device layer interfaces based on the FortiGate model and interface name.
• B.Use the Install On feature in the policy package to automatically assign different interfaces based on the branch.
• C.Create interfaces using device database scripts to use them on the same policy package of FortiGate devices.
• D.Enable metadata variables to use dynamic configurations in the standard interfaces of FortiManager.

Refer to the exhibit, which shows an OSPF network.

Which types of link-state advertisements (LSA) will NGFW-1 send, if it is a backup designated router (BDR)?

• A.NGFW-1 will send type 1 and type 5 LSAs.
• B.NGFW-1 will send type 1 and type 3 LSAs.
• C.NGFW-1 will send type 1 and type 2 LSAs.
• D.NGFW-1 will send type 1 and type 4 LSAs.

Refer to the exhibit, which shows a corporate network and a new remote office network.

An administrator must integrate the new remote office network with the corporate enterprise network.
What must the administrator do to allow routing between the two networks?

• A.The administrator must implement BGP to inject the new remote office network into the corporate FortiGate device
• B.The administrator must implement OSPF over IPsec on both FortiGate devices.
• C.The administrator must configure a static route to the subnet 192.168.l.0/24 on the corporate FortiGate device.
• D.The administrator must configure virtual links on both FortiGate devices.