NSE7_SDW-7.2 無料問題集「Fortinet NSE 7 - SD-WAN 7.2」

（A）Interfaces of type virtual wire pair can be used as SD-WAN members.

（B）An SD-WAN member can belong to two or more SD-WAN zones.

（C）Interfaces of type VLAN can be used as SD-WAN members.

（D）You can manually define the SD-WAN members sequence number.

（A）FortiGate used192.2.0.1as the gateway for the original direction of the traffic.

（B）FortiGate performed standard FIB routing on the session.

（C）FortiGate will not re-evaluate the session following a firewall policy change.

（D）FortiGate must re-evaluate the session due to routing change.

（A）The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

（B）XAuth is enabled as an additional level of authentication, which requires a username and password.

（C）A total of six packets are exchanged between an initiator and a responder instead of three packets.

（D）A peer ID is included in the first packet from the initiator, along with suggested security policies.

（A）You must configure AS path prepending.

（B）IBGP is preferred over EBGP, because IBGP preserves next hop information.

（C）You must use BGP to route traffic for both overlay and underlay links.

（D）You must configure BGP communities.

（A）The original direction of the symmetric traffic flows from port3 to port2.

（B）The reply direction of the asymmetric traffic flows from port2 to port3.

（C）The main session cannot be offloaded to hardware.

（D）The auxiliary session can be offloaded to hardware.

（A）You must configure AS path prepending.

（B）Learned routes can be used as dynamic destinations in SD-WAN rules.

（C）You must use external BGP.

（D）You must use BGP to route traffic for both overlay and underlay links.

（A）The interface T_INET_1 missed one SLA target.

（B）The interface T_INET_0 missed three SLA targets.

（C）The health-check VPN_PING orders the members according to the lowest jitter.

（D）There is no SLA criteria configured for the health-check Level3_DNS.

（A）You can reference meta fields.

（B）You can configure FortiManager to sync local configuration changes made on the managed device, to the CLI template.

（C）You can configure advanced CLI settings.

（D）You can configure interfaces as SD-WAN members without having to remove references first.

（A）You must use IKEv2 on IPsec tunnels.

（B）Routes for ADVPN shortcuts must be manually configured.

（C）SD-WAN can steer traffic to ADVPN shortcuts, established over IPsec overlays, configured as SD- WAN members.

（D）SD-WAN does not monitor the health and performance of ADVPN shortcuts.

（A）It acts as a policy compliance entity to review all managed FortiGate devices.

（B）It improves SD-WAN performance on the managed FortiGate devices.

（C）It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.

（D）It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.

（E）It sends probe signals as health checks to the beacon servers on behalf of FortiGate.