NSE7_SDW-6.4無料問題集「Fortinet NSE 7

質問 1

What are two reasons why it is effective to implement the internet service database (ISDB) in an SD-WAN rule? (Choose two )

（A）The ISDB applies rules to traffic from specific sources, based on application type.

（B）The ISDB requires application control to maintain signatures and perform load-balancing.

（C）The ISDB is dynamically updated and reduces administrative overhead.

（D）The ISDB contains the IP addresses and port ranges of well-known destinations.

正解：C、D 解答を投票する

質問 2

When attempting to establish an IPsec tunnel to FortiGate, all remote users match the FIRST_VPN IPsec VPN. This includes remote users that want to connect to the SECOND_VPN IPsec VPN. Which two configuration changes must you make on both IPsec VPNs so that remote users can connect to their intended IPsec VPN? (Choose two.)

（A）Configure different proposals.

（B）Configure a unique peer ID.

（C）Change the IKE mode to aggressive.

（D）Configure different Diffie Hellman groups.

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Refer to the exhibit.

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

（A）The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.

（B）The traffic shaper drops packets if the bandwidth is less than 2500 KBps.

（C）The measured bandwidth is less than 100 KBps.

（D）The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.

正解：C、D 解答を投票する

質問 4

Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

（A）get router info routing-table

（B）diagnose debug application ike

（C）get ipsec tunnel list

（D）diagnose sys virtual-wan-link service

正解：B 解答を投票する

質問 5

Which two statements about SD-WAN central management are true? (Choose two.)

（A）It is enabled by default.

（B）It uses templates to configure SD-WAN on managed devices.

（C）It is enabled or disabled on a per-ADOM basis.

（D）It does not allow you to monitor the status of SD-WAN members.

正解：B、C 解答を投票する

質問 6

Which statement about using BGP routes in SD-WAN is true?

（A）Adding static routes must be enabled on all ADVPN interfaces.

（B）Dynamic routing protocols can be used only with non-encrypted traffic

（C）VPN topologies must be form using only BGP dynamic routing with SD-WAN

（D）Learned routes can be used as dynamic destinations in SD-WAN rules

正解：D 解答を投票する

質問 7

Which two configuration tasks are required to use SD-WAN? (Choose two.)

（A）Specify the incoming interfaces in SD-WAN rules.

（B）Specify the outgoing interface routing cost.

（C）Add one or more members to an SD-WAN zone.

（D）Configure at least one firewall policy for SD-WAN traffic.

正解：C、D 解答を投票する

質問 8

What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

（A）It acts as a policy compliance entity to review all managed FortiGate devices.

（B）It improves SD-WAN performance on the managed FortiGate devices.

（C）It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.

（D）It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.

（E）It sends probe signals as health checks to the beacon servers on behalf of FortiGate.

正解：C、D 解答を投票する

NSE7_SDW-6.4 無料問題集「Fortinet NSE 7 - SD-WAN 6.4」

弊社を連絡する

関連リンク

トップ試験