NSE7_SDW-7.2無料問題集「Fortinet NSE 7

質問 1

Which two statements about SLA targets and SD-WAN rules are true? (Choose two.)

（A）SLA targets are used only by SD-WAN rules that are configured with Lowest Cost (SLA) or Maximize Bandwidth (SLA) as strategy

（B）SD-WAN rules use SLA targets to check if the preferred members meet the SLA requirements

（C）When configuring an SD-WAN rule you can select multiple SLA targets of the same performance SLA

（D）Member metrics are measured only if an SLA target is configured

正解：A、B 解答を投票する

質問 2

Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

（A）Set priority 10.

（B）Set load-balance-mode source-ip-ip-based.

（C）Set cost 15.

（D）Set source 100.64.1.1.

正解：A、C 解答を投票する

質問 3

What are two benefits of choosing packet duplication over FEC for data loss correction on noisy links? (Choose two.)

（A）Packet duplication supports hardware offloading.

（B）Packet duplication can leverage multiple IPsec overlays for sending additional data.

（C）Packet duplication uses smaller parity packets which results in less bandwidth consumption.

（D）Packet duplication does not require a route to the destination.

正解：A、B 解答を投票する

質問 4

Refer to the exhibits.

Exhibit A shows the SD-WAN rule status and the learned BGP routes with community 65000:10.
Exhibit B shows the SD-WAN rule configuration, the BGP neighbor configuration, and the route map configuration.
The administrator wants to steer corporate traffic using routes tags in the SD-WAN rule ID 1.
However, the administrator observes that the corporate traffic does not match the SD-WAN rule ID 1.
Based on the exhibits, which configuration change is required to fix issue?

（A）In SD-WAN rule ID 1, change the destination to use ISDB entries.

（B）In the BGP neighbor configuration, apply the route map dcl-lab-rm in the outbound direction.

（C）In the dcl-lab-rm route map configuration, unset match-community.

（D）In the dcl-lab-rm route map configuration, set set-route-tag to 10.

正解：B 解答を投票する

質問 5

Which are two benefits of using CLI templates in FortiManager? (Choose two.)

（A）You can reference meta fields.

（B）You can configure FortiManager to sync local configuration changes made on the managed device, to the CLI template.

（C）You can configure advanced CLI settings.

（D）You can configure interfaces as SD-WAN members without having to remove references first.

正解：A、C 解答を投票する

質問 6

Refer to the exhibit.

FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

（A）Configure the IKE mode to be aggressive mode.

（B）Specify a unique peer ID for each dial-up VPN interface.

（C）Use different proposals are used between the interfaces.

（D）Use unique Diffie Hellman groups on each VPN interface.

正解：A、B 解答を投票する

質問 7

Which two tasks are part of using central VPN management? (Choose two.)

（A）You can configure full mesh, star, and dial-up VPN topologies.

（B）FortiManager installs VPN settings on both managed and external gateways.

（C）You must enable VPN zones for SD-WAN deployments.

（D）You configure VPN communities to define common IPsec settings shared by all VPN gateways.

正解：A、D 解答を投票する

質問 8

What are two benefits of using the Internet service database (ISDB) in an SD-WAN rule? (Choose two.)

（A）The ISDB applies rules to traffic from specific sources, based on application type.

（B）The ISDB contains the IP addresses and port ranges of well-known internet services.

（C）The ISDB requires application control to maintain signatures and perform load balancing.

（D）The ISDB is dynamically updated and reduces administrative overhead.

正解：B、D 解答を投票する

NSE7_SDW-7.2 無料問題集「Fortinet NSE 7 - SD-WAN 7.2」

弊社を連絡する

関連リンク

トップ試験