最新的Fortinet NSE7_SDW-7.2免費考試真題

問題1

Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration.
Based on the exhibits, which two statements are correct? (Choose two.)

A. Port2 has the highest member priority.

B. SD-WAN rule ID 1 is set to lowest cost (SLA) mode.

C. FortiGate updated the outgoing interface list on the rule so it prefers port2.

D. Port2 has a lower latency than port1.

正確答案: C,D

問題2

Refer to the exhibit.

Which statement about the role of the ADVPN device in handling traffic is true?

A. An IKE session is established between 10.0.1.101 and 10.0.2.101 in the process of forming a shortcut tunnel.

B. Two spokes. 192.2. 1 and 10.0.2.101. establish a shortcut.

C. This is a spoke that has received an offer from a remote hub.

D. This is a hub that has received an offer from a spoke and has forwarded it to another spoke.

正確答案: C

問題3

Which SD-WAN setting enables FortiGate to delay the recovery of ADVPN shortcuts?

A. hold-down-time

B. auto-discovery-shortcuts

C. idle-timeout

D. link-down-failover

正確答案: A

問題4

Which diagnostic command can you use to show the member utilization statistics measured by performance SLAs for the last 10 minutes?

A. diagnose sys sdwan log

B. diagnose sys sdwan sla-log

C. diagnose sys sdwan intf-sla-log

D. diagnose ays sdwan health-check

正確答案: B

問題5

Refer to the exhibit.

Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true?
(Choose two.)

A. Dead peer detection is disabled.

B. FortiGate facilitated the negotiation of the T_INET_1_0_0 ADVPN shortcut over T_INET_1_0.

C. FortiGate does not install IPsec static routes for remote protected networks in the routing table.

D. The phase 1 configuration supports the network-overlay setting.

正確答案: C,D

問題6

What are two advantages of using an IPsec recommended template to configure an IPsec tunnel in an hub-and- spoke topology? (Choose two.)

A. It ensures consistent settings between phase1 and phase2.

B. It automatically install IPsec tunnels to every spoke when they are added to the FortiManager ADOM.

C. It guides the administrator to use Fortinet recommended settings.

D. The VPN monitor tool provides additional statistics for tunnels defined with an IPsec recommended template.

正確答案: A,C

說明：（僅 Fast2test 成員可見）

問題7

Which two statements are true about using SD-WAN to steer local-out traffic? (Choose two.)

A. FortiGate does not consider the source address of the packet when matching an SD-WAN rule for local- out traffic.

B. By default, local-out traffic does not use SD-WAN.

C. By default, FortiGate does not check if the selected member has a valid route to the destination.

D. You must configure each local-out feature individually, to use SD-WAN.

正確答案: B,D

問題8

Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

A. The type of traffic defined and allowed on firewall policy ID 1 is UDP.

B. FortiGate has terminated the session after a change on policy ID 1.

C. Firewall policy ID 1 has source NAT disabled.

D. Changes have been made on firewall policy ID 1 on FortiGate.

正確答案: D

最新的Fortinet NSE 7 - SD-WAN 7.2 - NSE7_SDW-7.2免費考試真題

聯系我們

站內鏈接

最新更新