NSE7_SDW-7.2試験無料問題集（99題）「Fortinet NSE 7

出題：1

Refer to the exhibits.

Exhibit A shows the packet duplication rule configuration, the SD-WAN zone status output, and the sniffer output on FortiGate acting as the sender. Exhibit B shows the sniffer output on a FortiGate acting as the receiver.
The administrator configured packet duplication on both FortiGate devices. The sniffer output on the sender FortiGate shows that FortiGate forwards an ICMP echo request packet over three overlays, but it only receives one reply packet through T_INET_1_0.
Based on the output shown in the exhibits, which two reasons can cause the observed behavior? (Choose two.)

A. On the receiver FortiGate,packet-de-duplicationis enabled.

B. On the sender FortiGate,duplication-max-numis set to3.

C. The ICMP echo request packets sent over T_INET_0_0 and T_MPLS_0 were dropped along the way.

D. The ICMP echo request packets received over T_INET_0_0 and T_MPLS_0 were offloaded to NPU.

正解：A,B 解答を投票する

出題：2

Exhibit A -

Exhibit B -

Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

A. port2 is referenced in a static route.

B. port1 is assigned a manual IP address.

C. port1 is referenced in a firewall policy.

D. port1 and port2 are not administratively down.

正解：C 解答を投票する

出題：3

Refer to the exhibit.

Based on the exhibit, which two actions does FortiGate perform on traffic passing through port2? (Choose two.)

A. FortiGate performs routing lookups for new sessions only, after a route change.

B. FortiGate does not change the routing information on existing sessions that use a valid gateway, after a route change.

C. FortiGate always blocks all traffic, after a route change.

D. FortiGate flushes all routing information from the session table, after a route change.

正解：A,B 解答を投票する

出題：4

Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

A. diagnose vpn tunnel list

B. get ipsec tunnel list

C. get router info routing-table all

D. diagnose debug application ike

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which two interfaces are considered overlay links? (Choose two.)

A. Physical

B. IPsec

C. GRE

D. LAG

正解：B,C 解答を投票する

出題：6

Which two statements about SD-WAN central management are true? (Choose two.)

A. It does not support meta fields.

B. The objects are saved in the ADOM common object database.

C. It supports normalized interfaces for SD-WAN member configuration.

D. It uses templates to configure SD-WAN on managed devices.

正解：B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Refer to the exhibit.

Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change?
(Choose two.)

A. FortiGate does not change existing sessions.

B. FortiGate terminates the old sessions.

C. FortiGate evaluates new sessions.

D. FortiGate flushes all sessions.

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Which are three key routing principles in SD-WAN? (Choose three.)

A. By default, SD-WAN members are skipped if they do not have a valid route to the destination.

B. SD-WAN rules have precedence over ISDB routes.

C. Regular policy routes have precedence over SD-WAN rules.

D. By default, SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

E. FortiGate performs route lookups for new sessions only.

正解：A,C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

Refer to the exhibit.

FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

A. Configure the IKE mode to be aggressive mode.

B. Use different proposals are used between the interfaces.

C. Specify a unique peer ID for each dial-up VPN interface.

D. Use unique Diffie Hellman groups on each VPN interface.

正解：A,C 解答を投票する

出題：10

What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two.)

A. It improves SD-WAN performance on the managed FortiGate devices.

B. It acts as a policy compliance entity to review all managed FortiGate devices.

C. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.

D. It sends probe signals as health checks to the beacon servers on behalf of FortiGate.

E. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.

正解：C,E 解答を投票する

NSE7_SDW-7.2試験無料問題集「Fortinet NSE 7 - SD-WAN 7.2 認定」