NSE7_SDW-7.0試験無料問題集（70題）「Fortinet NSE 7

出題：1

Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

A. diagnose vpn tunnel list

B. get ipsec tunnel list

C. get router info routing-table all

D. diagnose debug application ike

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which two tasks are part of using central VPN management? (Choose two.)

A. You must enable VPN zones for SD-WAN deployments.

B. FortiManager installs VPN settings on both managed and external gateways.

C. You configure VPN communities to define common IPsec settings shared by all VPN gateways.

D. You can configure full mesh, star, and dial-up VPN topologies.

正解：C,D 解答を投票する

出題：3

Refer to the exhibits.
Exhibit A -

Exhibit B -

Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B shows the system global and system settings configuration on dc1_fgt.
When branch1_client establishes a connection to dc1_host, the administrator observes that, on dc1_fgt, the reply traffic is routed over T_INET_0_0, even though T_INET_1_0 is the preferred member in the matching SD-WAN rule.
Based on the information shown in the exhibits, what configuration change must be made on dc1_fgt so dc1_fgt routes the reply traffic over T_INET_1_0?

A. Disable allow-subnet-overlap under config system settings.

B. Disable tcp-session-without-syn under config system settings.

C. Enable snat-route-change under config system global.

D. Enable auxiliary-session under config system settings.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Refer to the exhibit.

Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)

A. FortiGate does not change existing sessions.

B. FortiGate terminates the old sessions.

C. FortiGate evaluates new sessions.

D. FortiGate flushes all sessions.

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which statement is correct about SD-WAN and ADVPN?

A. You must use IKEv2 on IPsec tunnels.

B. Routes for ADVPN shortcuts must be manually configured.

C. SD-WAN can steer traffic to ADVPN shortcuts, established over IPsec overlays, configured as SD-WAN members.

D. SD-WAN does not monitor the health and performance of ADVPN shortcuts.

正解：C 解答を投票する

出題：6

Refer to the exhibit.

Which statement about the role of the ADVPN device in handling traffic is true?

A. Two hubs, 10.0.1.101 and 10.0.2.101, are receiving and forwarding queries between each other.

B. Two spokes, 192.2.0.1 and 10.0.2.101, forward their queries to their hubs.

C. This is a spoke that has received a query from a remote hub and has forwarded the response to its hub.

D. This is a hub that has received a query from a spoke and has forwarded it to another spoke.

正解：D 解答を投票する

出題：7

Refer to the exhibit.

The exhibit shows the SD-WAN rule status and configuration.
Based on the exhibit, which change in the measured latency will make T_MPLS_0 the new preferred member?

A. When T_INET_0_0 and T_MPLS_0 have the same latency.

B. When T_INET_0_0 has a latency of 250 ms.

C. When T_MPLS_0 has a latency of 100 ms.

D. When T_N1PLS_0 has a latency of 80 ms.

正解：D 解答を投票する

NSE7_SDW-7.0試験無料問題集「Fortinet NSE 7 - SD-WAN 7.0 認定」