NSE7_SDW-6.4無料問題集「Fortinet NSE 7

質問 1

FortiGate is connected to the internet and is obtaining the IP address on its egress interlace from the DHCP server Which statement is due when FortiGate restarts and receives preconfigured settings to install as part of a zero-touch provisioning process?

（A）FortiDeploy connects with FortiGate and provides the initial configuration to contact FortiManager

（B）FortiManager registers FortiGate after the restart and retrieves the existing configuration

（C）The FortiGate cloud key added to the FortiGate cloud portal and FortiGate performs a factory reset before the restart

（D）The zero-touch provisioning process completes internally, behind FortiGate

正解：A 解答を投票する

質問 2

Refer to the exhibit.
Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2 The administrator configured ADVPN on the dual regions topology

Which two statements are correct if a user in Toronto sends traffic to London? (Choose two )

（A）Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.

（B）Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.

（C）London generates an IKE information message that contains the Toronto public IP address.

（D）The first packets from Toronto to London are routed through Hub 1 then to Hub 2.

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Refer to exhibits.

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

（A）The dead member interface stays unavailable until an administrator manually brings the interface back.

（B）FortiGate has not received three consecutive requests from the SLA server configured for port2.

（C）Port2 needs to wait 500 milliseconds to change the status from alive to dead.

（D）Static routes using port2 are active in the routing table.

正解：B 解答を投票する

質問 4

Which diagnostic command can you use to show interface-specific SLA logs for the last 10 minutes?

（A）diagnose sys sdwan sla-log

（B）diagnose sys sdwan log

（C）diagnose sys sdwan health-check

（D）diagnose sys sdwan intf-sla-log

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Refer to the exhibits.

ExhibitA shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

（A）port1 is referenced in a firewall policy.

（B）port2 is referenced in a static route.

（C）port1 and port2 are not administratively down.

（D）port1 is assigned a manual IP address.

正解：A 解答を投票する

質問 6

Refer to exhibits.

Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)

（A）All the existing sessions will be blocked from using port1 and port2.

（B）All the existing sessions using SNAT will be flushed and routed through port1.

（C）All the existing sessions that do not use SNAT will be flushed and routed through port1.

（D）All the existing sessions will continue to use port2, and new sessions will use port1.

正解：B、C 解答を投票する

質問 7

Refer to the exhibit.

Based on the exhibit, which two actions does FortiGate perform on traffic passing through the SD-WAN member port2? (Choose two.)

（A）FortiGate marks the routing information on existing sessions as persistent.

（B）FortiGate always blocks all traffic after a route change.

（C）FortiGate flushes all routing information from the session table after a route change.

（D）FortiGate performs routing lookups for new sessions only after a route change.

正解：A、D 解答を投票する

質問 8

Refer to the exhibit.

Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2 The administrator configured ADVPN on the dual regions topology Which two statements are correct if a dynamic site-to-site tunne1 between Toronto and London has been established? (Choose two)

（A）add-route is enabled to install static routes on hub devices

（B）auto-discovery-forwarder IS enabled on all VPN interfaces

（C）tunnel-search IS set to phase 2 quick mode selectors

（D）auto-discovery-receiver is enabled on the egress VPN interfaces on the spokes

（E）auto-discovery-sender is enabled on the ingress VPN interfaces on hubs

正解：D、E 解答を投票する

NSE7_SDW-6.4 無料問題集「Fortinet NSE 7 - SD-WAN 6.4」

弊社を連絡する

関連リンク

トップ試験