Fortinet NSE7_SDW-6.4 시험

Question No : 1

Refer to the exhibit.



What must you configure to enable ADVPN?

• A.On the hub VPN, only the device needs additional phase one sett
• B.ADVPN should only be enabled on unmanaged FortiGate devices.
• C.Each VPN device has a unique pre-shared key configured separately on phase one
• D.The protected subnets should be set to address object to all (0.0 .0. o/o).

답을 확인하기

정답:

Question No : 2

Refer to the exhibit.



Which statement about the command route-tag in the SD-WAN rule is true?

• A.It enables the SD-WAN rule to load balance and assign traffic with a route tag
• B.It tags each route and references the tag in the routing table.
• C.It uses route tags for a BGP community and assigns the SD-WAN rules with same tag.
• D.It ensures route tags match the SD-WAN rule based on the rule order

답을 확인하기

정답:

Question No : 3

Refer to exhibits.
Exhibit A.



Exhibit B.



Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy
FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits.
To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?
A. The shaper mode must be applied per-IP shaper on the traffic shaping policy
B. The application control profile must be enabled on the firewall policy.
C. The web filter profile must be enabled on the firewall policy
D. The URL category must be specified on the traffic shaping policy

답을 확인하기

정답: C

Question No : 4

Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

• A.diagnose sys virtual-wan-link health-check
• B.diagnose sys virtual-wan-link log
• C.diagnose sys virtual-wan-link sla-lcg
• D.diagnose sys virtual-wan-link intf-sla-log

답을 확인하기

정답:

Question No : 5

Which statement is correct about the SD-WAN and ADVPN?

• A.ADVPN interface can be a member of SD-WAN interface.
• B.Dynamic VPN is not supported as an SD-Wan interface.
• C.Spoke support dynamic VPN as a static interface.
• D.Hub FortiGate is limited to use ADVPN as SD-WAN member interface.

답을 확인하기

정답:

Question No : 6

What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

• A.Per-IP shaping mode
• B.Reverse policy shaping mode
• C.Interface-based shaping mode
• D.Shared policy shaping mode

답을 확인하기

정답:

Question No : 7

Refer to the exhibit.



Which two statements about the debug output are correct? (Choose two)

• A.FortiGate provides statistics and readings based on historical traffic logs.
• B.This traffic shaper drops traffic that exceeds the set limits.
• C.The debug output shows per-lP shaper values and real-time readings.
• D.Traffic being controlled by the traffic shaper is under 1 Kbps

답을 확인하기

정답:

Question No : 8

In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two)

• A.Traffic has matched none of the FortiGate policy routes
• B.Matched traffic failed RPF and was caught by the rule.
• C.An absolute SD-WAN rule was defined and matched traffic
• D.The FIB lookup resolved interface was the SD-WAN member interface

답을 확인하기

정답:

Question No : 9

What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two)

• A.It improves SD-WAN performance on the managed FortiGate devices.
• B.It simplifies the deployment and administration of SD-WAN on managed FortiGate devices
• C.It sends probe signals as health checks to the beacon servers on behalf of FortiGate
• D.It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server
• E.It acts as a policy compliance entity to review all managed FortiGate devices

답을 확인하기

정답:

Question No : 10

Refer to exhibits.
Exhibit A.



Exhibit B.



Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.
The traffic shaping policy is being applied to all outbound traffic however inbound traffic is not being evaluated by the shaping policy
Based on the exhibit, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic'?
A. The reverse shaper option must be enabled and a traffic shaper must be selected
B. The guaranteed-10mbps option must be selected as the reverse shaper option.
C. A new firewall policy must be created and SD-WAN must be selected as the incoming interface.
D. The guaranteed-10mbps option must be selected as the per-IP shaper option

답을 확인하기

정답: B