NSE7_SDW-7.2試験無料問題集（96題）「Fortinet NSE 7

出題：1

Which diagnostic command can you use to show the configured SD-WAN zones and their assigned members?

A. diagnose sys sdwan interface

B. diagnose sys sdwan service

C. diagnose sys sdwan zone

D. diagnose sys sdwan member

正解：D 解答を投票する

出題：2

Refer to the exhibit.

The exhibit shows the BGP configuration on the hub in a hub-and-spoke topology. The administrator wants BGP to advertise prefixes from spokes to other spokes over the IPsec overlays, including additional paths.
However, when looking at the spoke routing table, the administrator does not see the prefixes from other spokes and the additional paths.
Based on the exhibit, which three settings must the administrator configure inside each BGP neighbor group so spokes can learn other spokes prefixes and their additional paths? (Choose three.)

A. Enable route-reflector-client

B. Set additional-path to send

C. Set advertisement-interval to the number of additional paths to advertise

D. Enable soft-reconfiguration

E. Set adv-additional-path to the number of additional paths to advertise

正解：A,B,E 解答を投票する

出題：3

Refer to the exhibit.

The exhibit shows the SD-WAN rule status and configuration.
Based on the exhibit, which change in the measured packet loss will make T_INET_1_0 the new preferred member?

A. When T_INET_1_0 has 4% packet loss.

B. When T_INET_0_0 has 4% packet loss.

C. When all three members have the same packet loss.

D. When T_INET_0_0 has 12% packet loss.

正解：A 解答を投票する

出題：4

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.

Based on the exhibit, which statement is true?

A. You can move port1 from the underlay zone to the overlay zone.

B. The corporate zone contains no member.

C. You can delete the virtual-wan-link zone because it contains no member.

D. The overlay zone contains four members.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

A. Traffic has matched none of the FortiGate policy routes.

B. Matched traffic failed RPF and was caught by the rule.

C. An absolute SD-WAN rule was defined and matched traffic.

D. The FIB lookup resolved interface was the SD-WAN interface.

正解：A,D 解答を投票する

出題：6

In which SD-WAN template field can you use a metadata variable?

A. Any field identified with an "M" in a circle.

B. You can use metadata variables only to define interface members and the gateway IP.

C. All SD-WAN template fields support metadata variables.

D. Any field Identified with a dollar sign ($) in a magnifying glass.

正解：C 解答を投票する

出題：7

Refer to the exhibit.

Which statement explains the output shown in the exhibit?

A. FortiGate performed standard FIB routing on the session.

B. FortiGate must re-evaluate the session due to routing change.

C. FortiGate will not re-evaluate the session following a firewall policy change.

D. FortiGate used 192.2.0.1 as the gateway for the original direction of the traffic.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

A. It provides direct connectivity between spokes by creating shortcuts.

B. It enables spokes to bypass the hub during shortcut negotiation.

C. It provides the benefits of a full-mesh topology in a hub-and-spoke network.

D. It enables spokes to establish shortcuts to third-party gateways.

正解：A,C 解答を投票する

出題：9

What three characteristics apply to provisioning templates available on FortiManager? (Choose three.)

A. A template group can include a system template and an SD-WAN template.

B. Templates are applied in order, from top to bottom.

C. A CLI template can be of type CLI script or Perl script.

D. A template group can contain CLI templates of both types.

E. You can apply a system template and a CLI template to the same FortiGate device.

正解：B,C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

What is true about SD-WAN multiregion topologies?

A. It is not compatible with ADVPN.

B. Each region has its own SD-WAN topology

C. Routing between the hub and spokes must be BGP.

D. Regions must correspond to geographical areas.

正解：B 解答を投票する

NSE7_SDW-7.2試験無料問題集「Fortinet NSE 7 - SD-WAN 7.2 認定」