2022 Valid NSE7_SDW-6.4 Real Exam Questions (Updated) 100% Dumps & Practice Exam
[UPDATED 2022] Fortinet NSE7_SDW-6.4 Questions Prepare with Free Demo of PDF
NEW QUESTION 15
Refer to the exhibit
Which statement about the ADVPN device role in handling traffic is true?
- A. This is a spoke that has received a query from a remote hub and has forwarded the response to its hub
- B. Two hubs. 10.1.1.254 and 10.1.2.254, are receiving and forwarding queries between each other
- C. Two spokes 100.64.3.1 and 10.1.2. 254 forward their queries to their hubs
- D. This is a hub that has received a query from a spoke and has forwarded it to another spoke
Answer: D
NEW QUESTION 16
Which statement is correct about the SD-WAN and ADVPN?
- A. Dynamic VPN is not supported as an SD-Wan interface.
- B. ADVPN interface can be a member of SD-WAN interface.
- C. Spoke support dynamic VPN as a static interface.
- D. Hub FortiGate is limited to use ADVPN as SD-WAN member interface.
Answer: A
NEW QUESTION 17
What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )
- A. It sends probe signals as health checks to the beacon servers on behalf of FortiGate.
- B. It acts as a policy compliance entity to review all managed FortiGate devices.
- C. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.
- D. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.
- E. It improves SD-WAN performance on the managed FortiGate devices.
Answer: B,C
NEW QUESTION 18
Refer to the exhibit.
Which statement about the trace evaluation by FomGate is true?
- A. Packets exceeding the configured concurrent connection limit are dropped based on the priority
- B. The packet exceeded the configured bandwidth and was dropped based on the priority configuration.
- C. The packet exceeded the configured maximum bandwidth and was dropped by the shared shaper.
- D. Packets exceeding the configured maximum concurrent connection limit are denied by the per-IP shaper.
Answer: D
Explanation:
configuration.
NEW QUESTION 19
Refer to Exhibit:
Which statement is correct it the responder FortiGate is using a dynamic routing protocol over the IPsec VPN interface?
- A. add-route must be disabled to prevent FortiGate from installing VPN static routes
- B. peertype must be set to accept only one peer ID for a unique VPN interface
- C. Only dial-up connections without XAuth can be used for the dynamic routing
- D. The phase 1 type must be changed to static for dynamic routing.
Answer: A
NEW QUESTION 20
Refer to exhibits.
Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.
Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)
- A. The implicit rule overrides all other rules because parameters widely cover sources and destinations.
- B. The All_Access_Rules rule load balances Vimeo application traffic among SD-WAN member interfaces.
- C. The initial session of an application goes through a learning phase in order to apply the correct rule.
- D. SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.
Answer: A,D
NEW QUESTION 21
Refer to the exhibit.
Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)
- A. Set cost 15.
- B. Set load-balance-mode source-ip-ip-based.
- C. Set source 100.64.1.1.
- D. Set priority 10.
Answer: A,D
NEW QUESTION 22
What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two.)
- A. It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager.
- B. It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.
- C. It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager.
- D. It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices.
Answer: C,D
Explanation:
Explanation/Reference:
NEW QUESTION 23
What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )
- A. It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager.
- B. It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.
- C. It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager.
- D. It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices.
Answer: C,D
NEW QUESTION 24
Refer to exhibits
Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate Based on the FortiGate configuration shown in the exhibits, what are two issues you might encounter when creating an SD-WAN interface on port1 and port2? {Choose two )
- A. Member interface that have IP address of 0.0.0.0/0.0.0.0
- B. Member interfaces that are physical interfaces as well as VLAN aggregate, and iPsec interfaces
- C. Member interfaces that are referenced by any other configuration element
- D. Member interfaces that are administratively down
Answer: C,D
NEW QUESTION 25
In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )
- A. An absolute SD-WAN rule was defined and matched traffic
- B. Matched traffic failed RPF and was caught by the rule.
- C. The FIB lookup resolved interface was the SD-WAN member interface
- D. Traffic has matched none of the FortiGate policy routes
Answer: A,D
NEW QUESTION 26
Refer to the exhibit.
What must you configure to enable ADVPN?
- A. ADVPN should only be enabled on unmanaged FortiGate devices.
- B. On the hub VPN, only the device needs additional phase one sett
- C. Each VPN device has a unique pre-shared key configured separately on phase one
- D. The protected subnets should be set to address object to all (0.0 .0. o/o).
Answer: C
NEW QUESTION 27
Refer to the exhibit.
Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)
- A. Set cost 15.
- B. Set source 100.64.1.1.
- C. Set priority 10.
- D. Set load-balance-mode source-ip-ip-based.
Answer: B
NEW QUESTION 28
Refer to the exhibit.
What must you configure to enable ADVPN?
- A. ADVPN should only be enabled on unmanaged FortiGate devices.
- B. On the hub VPN, only the device needs additional phase one sett
- C. Each VPN device has a unique pre-shared key configured separately on phase one
- D. The protected subnets should be set to address object to all (0.0 .0. o/o).
Answer: C
NEW QUESTION 29
Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )
- A. XAuth is enabled as an additional level of authentication, which requires a username and password.
- B. The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.
- C. A total of six packets are exchanged between an initiator and a responder instead of three packets.
- D. A peer ID is included in the first packet from the initiator, along with suggested security policies.
Answer: A,C
NEW QUESTION 30
Refer to exhibits.
Exhibit A shows the performance SLA exhibit B shows the SD-WAN diagnostics output.
Based on the exhibits, which statement is correct?
- A. Port1 became dead 1ecause no traffic was offload through the egress of port1.
- B. Both SD-WAN member interfaces have used separate SLA targets.
- C. The SLA state of port1 is dead after five unanswered requests by the SLA servers.
- D. SD-WAN member interfaces are affected by the SLA state of the inactive interface
Answer: C
NEW QUESTION 31
......
Fortinet NSE7_SDW-6.4 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NSE7_SDW-6.4 Deluxe Study Guide with Online Test Engine: https://www.guidetorrent.com/NSE7_SDW-6.4-pdf-free-download.html