NSE7_SDW-6.4 by Fortinet Actual Free Exam Questions And Answers

Question 1

In which two ways does FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning? (Choose two.)

A. From the central management configuration configured in FortiDeploy

B. From a FortiGuard definitions update

C. From a DHCP server configured with options 240 or 241

D. From another FortiGate device in the same local network

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit.

Based on output shown in the exhibit, which two commands can be used by SD-WAN rules? (Choose two.)

A. set priority 10.

B. set load-balance-mode source-ip-based.

C. set cost 15.

D. set source 100.64.1.1.

Discussion 0

Correct Answer: A,B Vote an answer

Question 3

Which statement is correct about SD-WAN and ADVPN?

A. SD-WAN does not monitor the health and performance of ADVPN shortcuts.

B. Routes for ADVPN shortcuts must be manually configured.

C. You must use OSPF.

D. SD-WAN can steer traffic to ADVPN shortcuts established over IPsec overlays configured as SD-WAN members.

Discussion 0

Correct Answer: D Vote an answer

Question 4

When attempting to establish an IPsec tunnel to FortiGate, all remote users match the FIRST_VPN IPsec VPN. This includes remote users that want to connect to the SECOND_VPN IPsec VPN. Which two configuration changes must you make on both IPsec VPNs so that remote users can connect to their intended IPsec VPN? (Choose two.)

A. Configure different proposals.

B. Configure a unique peer ID.

C. Change the IKE mode to aggressive.

D. Configure different Diffie Hellman groups.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

What is the lnkmtd process responsible for?

A. Logging interface quality information

B. Monitoring links for any bandwidth saturation

C. Flushing route tags addresses

D. Processing performance SLA probes

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

Which two tasks about using central VPN management are true? (Choose two.)

A. You configure VPN communities to define common IPsec settings shared by all VPN gateways.

B. You must enable VPN zones for SD-WAN deployments.

C. FortiManager installs VPN settings on both managed and external gateways.

D. You can configure full mesh, star, and dial-up VPN topologies.

Discussion 0

Correct Answer: A,D Vote an answer

Question 7

Which statement is correct about the SD-WAN and ADVPN?

A. Hub FortiGate is limited to use ADVPN as SD-WAN member interface.

B. Dynamic VPN is not supported as an SD-Wan interface.

C. ADVPN interface can be a member of SD-WAN interface.

D. Spoke support dynamic VPN as a static interface.

Discussion 0

Correct Answer: C Vote an answer

Question 8

Refer to the exhibit.

Based on the output, which two statements are true? (Choose two )

A. The diagnostic output presents only of the policy routes

B. There is more than one SD-WAN rule configured

C. The all_rules rule is the implicit SD-WAN rule in place

D. At least one policy route is implemented and in effect

Discussion 0

Correct Answer: A,B Vote an answer

Question 9

Refer to the exhibit.

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

A. The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.

B. The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.

C. The traffic shaper drops packets if the bandwidth is less than 2500 KBps.

D. The measured bandwidth is less than 100 KBps.

Discussion 0

Correct Answer: B,D Vote an answer

Fortinet NSE 7 - SD-WAN 6.4 - NSE7_SDW-6.4 Exam Practice Test

Contact Us

Useful Links

Latest Updated