NSE7_SDW-7.0試験無料問題集（70題）「Fortinet NSE 7

出題：1

Which three matching traffic criteria are available in SD-WAN rules? (Choose three.)

A. Type of physical link connection

B. Application signatures

C. Internet service database (ISDB) address object

D. Source and destination IP address

E. URL categories

正解：B,C,D 解答を投票する

出題：2

Refer to the exhibit.

Which statement explains the output shown in the exhibit?

A. FortiGate performed standard FIB routing on the session.

B. FortiGate must re-evaluate the session due to routing change.

C. FortiGate will not re-evaluate the session following a firewall policy change.

D. FortiGate used 192.2.0.1 as the gateway for the original direction of the traffic.

正解：B 解答を投票する

出題：3

Which two tasks are part of using central VPN management? (Choose two.)

A. You must enable VPN zones for SD-WAN deployments.

B. FortiManager installs VPN settings on both managed and external gateways.

C. You configure VPN communities to define common IPsec settings shared by all VPN gateways.

D. You can configure full mesh, star, and dial-up VPN topologies.

正解：C,D 解答を投票する

出題：4

Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows the source NAT (SNAT) global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two actions does FortiGate perform on existing sessions established over port2, if the administrator increases the static route priority on port2 to 20? (Choose two.)

A. FortiGate continues routing the sessions with no SNAT, over port2.

B. FortiGate performs a route lookup for the original traffic only.

C. FortiGate flags the sessions as dirty.

D. FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.

正解：C,D 解答を投票する

出題：5

Which statement about using BGP for ADVPN is true?

A. You must configure AS path prepending.

B. You must use BGP to route traffic for both overlay and underlay links.

C. You must configure BGP communities.

D. IBGP is preferred over EBGP, because IBGP preserves next hop information.

正解：D 解答を投票する

出題：6

What are two benefits of using forward error correction (FEC) in IPsec VPNs? (Choose two.)

A. FEC improves reliability of noisy links.

B. FEC transmits parity packets that can be used to reconstruct packet loss.

C. FEC can leverage multiple IPsec tunnels for parity packets transmission.

D. FEC supports hardware offloading.

正解：A,B 解答を投票する

出題：7

Which are two benefits of using CLI templates in FortiManager? (Choose two.)

A. You can configure advanced CLI settings.

B. You can configure FortiManager to sync local configuration changes made on the managed device, to the CLI template.

C. You can reference meta fields.

D. You can configure interfaces as SD-WAN members without having to remove references first.

正解：A,C 解答を投票する

NSE7_SDW-7.0試験無料問題集「Fortinet NSE 7 - SD-WAN 7.0 認定」