Logo ExamsQA
Exit
Official Bank 0/129

NSE 6 – Network Security 7.6 Support Engineer (FCSS_NST_SE-7.6) - Fortinet Exam Questions

Last updated on July 22, 2026

97% Exam Compliance
129 Total Questions
1
Question
Exhibit.

Exhibit

Refer to the exhibit, which contains partial output from an IKE real-time debug. Which two statements about this debug output are correct? (Choose two.)
Select 2
Options
A Perfect Forward Secrecy (PFS) is enabled in the configuration.
B The initiator provided remote as its IPsec peer ID.
C It shows a phase 2 negotiation.
D The local gateway IP address is 10.0.0.1.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Exhibit.

Refer to the exhibit, which shows the output of a diagnose command.

What can you conclude about the debug output in this scenario?
Options
A The first server provided to FortiGate when it performed a DNS query looking for a list of rating servers, was 121.111.236.179.
B FortiGate used 64.26.151.37 as the initial server to validate its contract.
C Servers with a negative TZ value are less preferred for rating requests.
D There is a natural correlation between the value in the FortiGuard-requests field and the value in the Weight field.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
What can cause an IKEv2 tunnel to go down after it was initially brought up successfully?
Options
A A mismatched proposal was detected during the IKE_AUTH exchange.
B A mismatched pre-shared key was detected during the IKE_AUTH exchange.
C Mismatched quick-mode selectors were detected during the CREATE_CHILD_SA exchange.
D A mismatched Diffie-Hellman group was detected during the IKE_SA_INIT exchange.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which two statements about an auxiliary session ate true? (Choose two.)
Select 2
Options
A With the auxiliary session selling disabled, only auxiliary sessions are offloaded.
B With the auxiliary session setting enabled. Iwo sessions are created in case of routing change.
C With the auxiliary session setting disabled, for each traffic path. FortiGate uses the same auxiliary session.
D With the auxiliary session setting enabled. ECMP traffic is accelerated to the NP6 processor.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
What can cause an IKEv2 tunnel to go down after it was initially brought up successfully?
Options
A Mismatched traffic selectors (phase 2 / “quick-mode selectors”) were detected during the CREATE_CHILD_SA exchange.
B A mismatched pre-shared key was detected during the IKE_AUTH exchange.
C A mismatched Diffie-Hellman group was detected during the IKE_SA_INIT exchange.
D A mismatched proposal was detected during the IKE_AUTH exchange.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.