NSE7_SDW-7.2試験無料問題集（101題）「Fortinet NSE 7

出題：1

Exhibit B -

Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

A. port2 is referenced in a static route.

B. port1 is assigned a manual IP address.

C. port1 is referenced in a firewall policy.

D. port1 and port2 are not administratively down.

正解：C 解答を投票する

出題：2

Which statement is correct about SD-WAN and ADVPN?

A. You must use IKEv2 on IPsec tunnels.

B. Routes for ADVPN shortcuts must be manually configured.

C. SD-WAN can steer traffic to ADVPN shortcuts, established over IPsec overlays, configured as SD- WAN members.

D. SD-WAN does not monitor the health and performance of ADVPN shortcuts.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups.
Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)

A. Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.

B. The first packets from Toronto to London are routed through Hub 1 then to Hub 2.

C. Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.

D. London generates an IKE information message that contains the Toronto public IP address.

正解：B,C 解答を投票する

出題：4

The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks. What are three mandatory post-run tasks that must be performed? (Choose three.)

A. Assign an sdwan_id metadata variable to each device (branch and hub).

B. Configure SD-WAN rules.

C. Create policy packages for branch devices.

D. Configure routing through overlay tunnels created by the SD-WAN overlay template.

E. Assign a branch_id metadata variable to each branch device.

正解：B,C,E 解答を投票する

出題：5

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process?
(Choose two.)

A. The zero-touch provisioning process has completed internally, behind FortiGate.

B. A factory reset performed on FortiGate.

C. The FortiGate cloud key has not been added to the FortiGate cloud portal.

D. FortiGate has obtained a configuration from the platform template in FortiGate cloud.

E. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager

正解：A,C 解答を投票する

出題：6

Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration.
Based on the exhibits, which two statements are correct? (Choose two.)

A. Port2 has a lower latency than port1.

B. FortiGate updated the outgoing interface list on the rule so it prefers port2.

C. SD-WAN rule ID 1 is set to lowest cost (SLA) mode.

D. Port2 has the highest member priority.

正解：A,B 解答を投票する

出題：7

Refer to the exhibits.

Exhibit A shows a policy package definition Exhibit B shows the install log that the administrator received when he tried to install the policy package on FortiGate devices.
Based on the output shown in the exhibits, what can the administrator do to solve the Issue?

A. Dynamic mapping should be done automatically. Review the LAN interface configuration for branch2_fgt.

B. Create dynamic mapping for the LAN interface for all devices in the installation target list.

C. Use a metadata variable instead of a dynamic interface to define the firewall policy.

D. Policies can refer to only one LAN source interface. Keep only the D-LAN, which is the dynamic LAN interface.

正解：B 解答を投票する

出題：8

Refer to the exhibit.

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2.
Which two configuration settings are required for Toronto and London spokes to establish an ADVPN shortcut? (Choose two.)

A. On the spokes,auto-discovery-receivermust be enabled on the IPsec VPN to the hub.

B. On the hubs,auto-discovery-sendermust be enabled on the IPsec VPNs to spokes.

C. auto-discovery-forwardermust be enabled on all IPsec VPNs.

D. On the hubs,net-devicemust be enabled on all IPsec VPNs.

正解：A,B 解答を投票する

出題：9

Refer to the exhibits.
Exhibit A -

Exhibit B -

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member status, the routing table, and the performance SLA status.
If port2 is detected dead by FortiGate, what is the expected behavior?

A. The administrator manually restores the static routes for port2, if port2 becomes alive.

B. Host 8.8.8.8 is reachable through port1 and port2.

C. FortiGate removes all static routes for port2.

D. Port2 becomes alive after three successful probes are detected.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

A. It provides direct connectivity between spokes by creating shortcuts.

B. It enables spokes to bypass the hub during shortcut negotiation.

C. It provides the benefits of a full-mesh topology in a hub-and-spoke network.

D. It enables spokes to establish shortcuts to third-party gateways.

正解：A,C 解答を投票する

NSE7_SDW-7.2試験無料問題集「Fortinet NSE 7 - SD-WAN 7.2 認定」