NSE7_SDW-6.4試験無料問題集（82題）「Fortinet NSE 7

出題：1

Which two statements about SLA targets and SD-WAN rules are true? (Choose two.)

A. When configuring an SD-WAN rule, you can select multiple SLA targets of the same performance SLA.

B. SD-WAN rules use SLA targets to check if the preferred members meet the SLA requirements.

C. SLA targets are used only by SD-WAN rules that are configured with Lowest Cost (SLA) or Maximize Bandwidth (SLA) as strategy.

D. Member metrics are measured only if an SLA target is configured.

正解：B,C 解答を投票する

出題：2

Refer to exhibits.

Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)

A. All the existing sessions will be blocked from using port1 and port2.

B. All the existing sessions that do not use SNAT will be flushed and routed through port1.

C. All the existing sessions will continue to use port2, and new sessions will use port1.

D. All the existing sessions using SNAT will be flushed and routed through port1.

正解：B,D 解答を投票する

出題：3

Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits.
To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?

A. The shaper mode must be applied per-IP shaper on the traffic shaping policy

B. The URL category must be specified on the traffic shaping policy

C. The web filter profile must be enabled on the firewall policy

D. The application control profile must be enabled on the firewall policy.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Refer to the exhibit.

Which statement about the command route-tag in the SD-WAN rule is true?

A. It tags each route and references the tag in the routing table.

B. It uses route tags for a BGP community and assigns the SD-WAN rules with same tag.

C. It ensures route tags match the SD-WAN rule based on the rule order

D. It enables the SD-WAN rule to load balance and assign traffic with a route tag

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which two reasons make forward error correction (FEC) ideal to enable in a phase one VPN interface? (Choose two )

A. FEC transmits additional packets as redundant data to the remote device.

B. FEC reduces the stress on the remote device jitter buffer to reconstruct packet loss

C. FEC is useful to increase speed at which traffic is routed through IPsec tunnels.

D. FEC transmits the original payload in full to recover the error in transmission.

E. FEC improves reliability which overcomes adverse WAN conditions such as noisy links.

正解：A,E 解答を投票する

出題：6

Which diagnostic command can you use to show the SD-WAN rules interface information and state?

A. diagnose sys virtual-wan-link member.

B. diagnose sys virtual-wan-link route-tag-list

C. diagnose sys virtual-wan-link neighbor.

D. diagnose sys virtual-wan-link service

正解：D 解答を投票する

出題：7

What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

A. It improves SD-WAN performance on the managed FortiGate devices.

B. It acts as a policy compliance entity to review all managed FortiGate devices.

C. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.

D. It sends probe signals as health checks to the beacon servers on behalf of FortiGate.

E. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.

正解：C,E 解答を投票する

出題：8

Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two)

A. Transport Layer Security (TLS)

B. Internet Key Exchange (IKE)

C. Secure Shell (SSH)

D. Encapsulating Security Payload (ESP)

E. Security Association (SA)

正解：B,D 解答を投票する

NSE7_SDW-6.4試験無料問題集「Fortinet NSE 7 - SD-WAN 6.4 認定」