Question 1

A company's users on an IPsec VPN between FortiGate A and B have experienced intermittent issues since implementing VXLAN. The administrator suspects that
packets exceeding the 1500-byte default MTU are causing the problems.
In which situation would adjusting the interface??s maximum MTU value help resolve issues caused by protocols that add extra headers to IP packets?

Accepted Answer

Correct answer: C

Question 2

Refer to the exhibit, which shows a partial troubleshooting command output.
An administrator is extensively using IPsec on FortiGate. Many tunnels show information similar to the output shown in the exhibit.
What can the administrator conclude?

Accepted Answer

Correct answer: B

Question 3

Refer to the exhibit, which shows the VDOM section of a FortiGate device.
An administrator discovers that webfilter stopped working in Core1 and Core2 after a maintenance window.

From SurePassExam
https://www.surepassexam.com/FCSS_EFW_AD-7.6-exam-dumps.html (57 New Questions)
Which two reasons could explain why webfilter stopped working? (Choose two.)

Accepted Answer

Correct answer: BD

Question 4

Refer to the exhibit, which shows a LAN interface connected from FortiGate to two FortiSwitch devices.
What two conclusions can you draw from the corresponding LAN interface? (Choose two.)

Accepted Answer

Correct answer: BC

Question 5

Refer to the exhibit, which shows a corporate network and a new remote office network.

From SurePassExam
https://www.surepassexam.com/FCSS_EFW_AD-7.6-exam-dumps.html (57 New Questions)
An administrator must integrate the new remote office network with the corporate enterprise network.
What must the administrator do to allow routing between the two networks?

Accepted Answer

Correct answer: D

Question 6

Refer to the exhibit, which shows an ADVPN network
An administrator must configure an ADVPN using IBGP and EBGP to connect overlay network 1 with 2.
What two options must the administrator configure in BGP? (Choose two.)

Accepted Answer

Correct answer: AB

Question 7

Refer to the exhibit, which shows an OSPF network.

From SurePassExam
https://www.surepassexam.com/FCSS_EFW_AD-7.6-exam-dumps.html (57 New Questions)
Which configuration must the administrator apply to optimize the OSPF database?

Accepted Answer

Correct answer: B

Question 8

Refer to the exhibit, which contains a partial command output.
The administrator has configured BGP on FortiGate. The status of this new BGP configuration is shown in the exhibit.
What configuration must the administrator consider next?

Accepted Answer

Correct answer: D

Question 9

A vulnerability scan report has revealed that a user has generated traffic to the website example.com (10.10.10.10) using a weak SSL/TLS version supported by
the HTTPS web server.

From SurePassExam
https://www.surepassexam.com/FCSS_EFW_AD-7.6-exam-dumps.html (57 New Questions)
What can the firewall administrator do to block all outdated SSL/TLS versions on any HTTPS web server to prevent possible attacks on user traffic?

Accepted Answer

Correct answer: A

Question 10

An administrator received a FortiAnalyzer alert that a 1 disk filled up in a day. Upon investigation, they found thousands of unusual DNS log requests, such as
JHCMQK.website.com, with no answers. They later discovered that DNS exfiltration was occurring through both UDP and TLS.
How can the administrator prevent this data theft technique?

Accepted Answer

Correct answer: D