NSE7_SDW-6.4試験無料問題集（82題）「Fortinet NSE 7

出題：1

Refer to exhibits.

Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.
The traffic shaping policy is being applied to all outbound traffic; however, inbound traffic is not being evaluated by the shaping policy.
Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?

A. In the traffic shaping policy, enable Reverse shaper, and then select the traffic shaper to use.

B. In the firewall policy, select Proxy-based as Inspection Mode.

C. In the traffic shaping policy, select Assign Shaping Class ID as Action.

D. Create a new firewall policy, and the select the SD-WAN zone as Incoming Interface.

正解：A 解答を投票する

出題：2

Why is it effective to use SD WAN rules when configuring application control?

A. Because traffic can be load balanced based on application type

B. Because the application database is manually maintained by administrators

C. Because SD-WAIM rules are independent from firewall policies to avoid controlling applications

D. Because you must use certificate full inspection on the firewall policy

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

A. The type of traffic defined and allowed on firewall policy ID 1 is UDP.

B. FortiGate has terminated the session after a change on policy ID 1.

C. Changes have been made on firewall policy ID 1 on FortiGate.

D. Firewall policy ID 1 has source NAT disabled.

正解：C 解答を投票する

出題：4

Refer to the exhibit

Which statement about the ADVPN device role in handling traffic is true?

A. Two hubs. 10.1.1.254 and 10.1.2.254, are receiving and forwarding queries between each other

B. This is a spoke that has received a query from a remote hub and has forwarded the response to its hub

C. Two spokes 100.64.3.1 and 10.1.2. 254 forward their queries to their hubs

D. This is a hub that has received a query from a spoke and has forwarded it to another spoke

正解：D 解答を投票する

出題：5

Refer to the exhibit.

FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

A. Configure the IKE mode to be aggressive mode.

B. Use different proposals are used between the interfaces.

C. Specify a unique peer ID for each dial-up VPN interface.

D. Use unique Diffie Hellman groups on each VPN interface.

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which diagnostic command can you use to show the SD-WAN rules interface information and state?

A. diagnose sys virtual-wan-link member.

B. diagnose sys virtual-wan-link route-tag-list

C. diagnose sys virtual-wan-link neighbor.

D. diagnose sys virtual-wan-link service

正解：D 解答を投票する

出題：7

Which two statements describe how IPsec phase 1 aggressive mode is different from main mode when performing IKE negotiation? (Choose two)

A. The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

B. A peer ID is included in the first packet from the initiator, along with suggested security policies.

C. XAuth is enabled as an additional level of authentication, which requires a username and password.

D. A total of six packets are exchanged between an initiator and a responder instead of three packets.

正解：C,D 解答を投票する

出題：8

Refer to the exhibit. Which conclusion about the packet debug flow output is correct?

A. The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

B. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

C. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the firewall policy, and the packet was dropped.

D. The packet size exceeded the outgoing interface MTU.

正解：B 解答を投票する

NSE7_SDW-6.4試験無料問題集「Fortinet NSE 7 - SD-WAN 6.4 認定」