Free FCSS-NST-SE-7-6 Fortinet FCSS-NST-SE-7-6 Practice Test Question - Page 2

Question 4 (Topic 1)

When FortiGate enters conserve mode because of memory pressure, which action can FortiGate perform to preserve memory?

Select an option, then click Submit answer.

○ FortiGate begins dropping all new sessions to protect system resources.
○ FortiGate reduces or stops non-essential processes like logging and antivirus scanning.
○ FortiGate switches to a less memory-intensive inspection mode, such as flow-based inspection.
○ FortiGate automatically reboots to clear memory and restore full operation.

Reference / correct answer:

FortiGate reduces or stops non-essential processes like logging and antivirus scanning.

Most accepted answer: B. FortiGate reduces or stops non-essential processes like logging and antivirus scanning.

Community votes: A=3, B=6

Selected Answer: B Not A. p.63 study guide. It doesn't start to drop ALL new sessions. According to your settings it drops sessions that require inspection. Only when extreme threshold is reached it just drop all sessions. But the point here is that initially it DOESN'T START dropping ALL new connections... Only the ones requiring inspection and according to what you configured for AV upvoted 1 times

Selected Answer: B The correct answer is B. Here's what the study guide actually says, precisely: Page 62 — conserve mode actions: FortiGate does not accept configuration changes FortiGate skips quarantine actions (including FortiSandbox analysis) → stops non-essential processes Page 63 — av-failopen (default = pass): "All new sessions pass without inspection until FortiGate switches back to non-conserve mode." This means antivirus scanning stops for new sessions — exactly what option B describes. upvoted 1 times

Selected Answer: B ❌ A) “FortiGate begins dropping all new sessions…” En la guía, dropping new sessions ocurre al superar el umbral Extreme (por defecto ~95%). En el umbral Red (conserve mode) no necesariamente “droppea todo lo nuevo” de inmediato; primero aplica medidas como bypass/limitaciones, y solo si se llega a Extreme se empiezan a dropear nuevas sesiones. La opción A es demasiado absoluta (“all new sessions”) para lo que describe el PDF. upvoted 1 times

Selected Answer: A I don't think there is a mechanism which shuts of logging but that this is an extension of the frozen device. Should be A in my opinion. upvoted 1 times

Selected Answer: B OK because of words "FortiGate ENTERS conserve mode" I then change my mind and expect it not to be directly in Extreme threshold, but Red threshold only. So it won't begin to drop all new sessions. Then most probable answer is B. upvoted 1 times

Question 5 (Topic 1)

Refer to the exhibit. The port1 interface configuration on FortiGate and partial session information for ICMP traffic are shown. Which two things happen to the session information if a routing change occurs that affects this session? (Choose two.)

Select an option, then click Submit answer.

○ The session information will not change even when the active route has been removed from the routing table.
○ The session information will not change unless the current route has been removed from the routing table.
○ The session will be flagged as dirty but no route lookups will be performed.
○ This session will be unaffected by routing changes. The routing changes will apply only to new sessions.

Reference / correct answer:

This session will be unaffected by routing changes. The routing changes will apply only to new sessions.

Most accepted answer: D. This session will be unaffected by routing changes. The routing changes will apply only to new sessions.

Community votes: A=1, B=3, D=4

Selected Answer: BD Answer: B and D B and D are complementary: D covers the normal behavior (routing modifications don't touch existing sessions), and B captures the one exception (route removal forces reevaluation). A is the trap — it incorrectly implies route_preserve protects against route removal, which it does not. upvoted 2 times

Selected Answer: BD Henkel, on page 389 we read: - the current route must still be present in the FIB otherwise fortigate flags the session as dirty and reevaluates it - Existing session routing information is marked as persistent and applies only to modified routes to new sessions. If you delete your default route and you have persistent sessions on you'll not have internet connectivity. upvoted 3 times

Selected Answer: BD Si la ruta desaparece de la tabla de rutas que es lo que indica la A, la sesion se ve afectada ya que no tiene ruta para salir. upvoted 2 times

Selected Answer: AD See study guide page 90 to 92, 388 and 389. A: there is no flag "dirty" (only "may_dirty"), so the routing for the session remains intact, no flush ✅ D: session unaffected by routing changes ✅ Very tricky question. But B a C are wrong because the "preserve-session-route" feature prevents exactly this behavior. upvoted 2 times

Question 6 (Topic 1)

Refer to the exhibit. The output of diagnose automation test command is shown. Which two observations can you make from the output? (Choose two.)

Select an option, then click Submit answer.

○ The test was unsuccessful.
○ The automation stitch test is not being logged.
○ A high availability (HA) failover occurred.
○ The configuration was backed up.

Free FCSS-NST-SE-7-6 – Fortinet FCSS-NST-SE-7-6 Practice Test Question