最新的Fortinet NSE7_SDW-6.4免費考試真題

問題1

Which diagnostic command can you use to show interface-specific SLA logs for the last 10 minutes?

A. diagnose sys sdwan health-check

B. diagnose sys sdwan log

C. diagnose sys sdwan sla-log

D. diagnose sys sdwan intf-sla-log

正確答案: C

說明：（僅 Fast2test 成員可見）

問題2

Which statement is correct about SD-WAN and ADVPN?

A. You must use OSPF.

B. SD-WAN can steer traffic to ADVPN shortcuts established over IPsec overlays configured as SD-WAN members.

C. Routes for ADVPN shortcuts must be manually configured.

D. SD-WAN does not monitor the health and performance of ADVPN shortcuts.

正確答案: B

問題3

What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two )

A. Specify incoming interfaces in SD-WAN rules.

B. Specify outgoing interface routing cost.

C. Select SD-WAN balancing strategy.

D. Configure SD-WAN rules interface preference.

正確答案: B,D

問題4

Refer to the exhibit. Which conclusion about the packet debug flow output is correct?

A. The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

B. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

C. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the firewall policy, and the packet was dropped.

D. The packet size exceeded the outgoing interface MTU.

正確答案: B

問題5

Refer to the exhibit.

Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2 The administrator configured ADVPN on the dual regions topology Which two statements are correct if a dynamic site-to-site tunne1 between Toronto and London has been established? (Choose two)

A. add-route is enabled to install static routes on hub devices

B. auto-discovery-forwarder IS enabled on all VPN interfaces

C. auto-discovery-sender is enabled on the ingress VPN interfaces on hubs

D. auto-discovery-receiver is enabled on the egress VPN interfaces on the spokes

E. tunnel-search IS set to phase 2 quick mode selectors

正確答案: C,D

問題6

Refer to exhibits.

Exhibit A shows the performance SLA exhibit B shows the SD-WAN diagnostics output.
Based on the exhibits, which statement is correct?

A. Port1 became dead 1ecause no traffic was offload through the egress of port1.

B. SD-WAN member interfaces are affected by the SLA state of the inactive interface

C. Both SD-WAN member interfaces have used separate SLA targets.

D. The SLA state of port1 is dead after five unanswered requests by the SLA servers.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題7

Which two configuration tasks are required to use SD-WAN? (Choose two.)

A. Add one or more members to an SD-WAN zone.

B. Specify the outgoing interface routing cost.

C. Specify the incoming interfaces in SD-WAN rules.

D. Configure at least one firewall policy for SD-WAN traffic.

正確答案: A,D

問題8

Refer to the exhibit.

Which are two expected behaviors of the traffic that matches the traffic shaper? (Choose two.)

A. The number of simultaneous connections allowed for each source IP address can exceed 5 connections.

B. The traffic shaper limits the combined bandwidth of all connections to a maximum of 5 MB/sec.

C. The number of simultaneous connections among all source IP addresses can exceed 5 connections.

D. The traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.

正確答案: C,D

問題9

Refer to the exhibits.
Exhibit A:

Exhibit B:

Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate distributes traffic.
Based on the exhibits, what are two expected behaviors when FortiGate processes SD-WAN traffic? (Choose two.)

A. SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.

B. The Vimeo SD-WAN rule steers Vimeo application traffic among all SD-WAN member interfaces.

C. The first Vimeo session may not match the Vimeo SD-WAN rule because the session is used for the application learning phase.

D. The implicit rule overrides all other rules because parameters widely cover sources and destinations.

正確答案: A,C

最新的Fortinet NSE 7 - SD-WAN 6.4 - NSE7_SDW-6.4免費考試真題

聯系我們

站內鏈接

最新更新