Fortinet Fortinet Certifications NSE7_SDW-6.4 Questions & Answers

• Question 11:

  Refer to the exhibits.

  

  

  ExhibitA shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.

  Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

  A. port2 is referenced in a static route.

  B. port1 is assigned a manual IP address.

  C. port1 and port2 are not administratively down.

  D. port1 is referenced in a firewall policy.

  Correct Answer: D

• Question 12:

  Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two )

  A. It creates redundant tunnels between hub-and-spokes, in case failure takes place on the primary links.

  B. It dynamically assigns cost and weight between the hub and the spokes, based on the physical distance.

  C. It ensures that spoke-to-spoke traffic no longer needs to flow through the tunnels through the hub.

  D. It provides direct connectivity between all sites by creating on-demand tunnels between spokes.

  Correct Answer: CD

• Question 13:

  Which statement about using BGP routes in SD-WAN is true?

  A. Learned routes can be used as dynamic destinations in SD-WAN rules.

  B. You must use BGP to route traffic for both overlay and underlay links.

  C. You must configure AS path prepending.

  D. You must use external BGP.

  Correct Answer: A

• Question 14:

  Refer to the exhibit.

  

  Based on the exhibit, which status description is correct?

  A. Port1 is dead because it does not meet the SLA target.

  B. Port2 is alive because its packet loss is lower than 10%.

  C. The SD-WAN members are monitored by different performance SLAs.

  D. Traffic matching the SD-WAN rule is steered through port2.

  Correct Answer: D

• Question 15:

  What is the lnkmtd process responsible for?

  A. Monitoring links for any bandwidth saturation

  B. Processing performance SLA probes

  C. Flushing route tags addresses

  D. Logging interface quality information

  Correct Answer: B

• Question 16:

  Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

  A. diagnose sys virtual-wan-link health-check

  B. diagnose sys virtual-wan-link log

  C. diagnose sys virtual-wan-link sla-log

  D. diagnose sys virtual-wan-link intf-sla-log

  Correct Answer: C

  Reference: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/943037/sla-logging https://community.fortinet.com/t5/FortiGate/Technical-Tip-SLA-Logging/ta-p/190934

• Question 17:

  Which statement is correct about SD-WAN and ADVPN?

  A. You must use OSPF.

  B. SD-WAN can steer traffic to ADVPN shortcuts established over IPsec overlays configured as SD-WAN members.

  C. Routes for ADVPN shortcuts must be manually configured.

  D. SD-WAN does not monitor the health and performance of ADVPN shortcuts.

  Correct Answer: B

• Question 18:

  What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )

  A. It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.

  B. It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices.

  C. It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager.

  D. It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager.

  Correct Answer: AD

  SD-WAN 6.4 Guide Page 158. https://docs2.fortinet.com/document/fortimanager/6.4.0/sd-wan-orchestrator-6-4-0-administration-guide/91581/introduction

• Question 19:

  Refer to exhibits. Exhibit A.

  

  Exhibit B.

  

  Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SO-WAN interface and the static routes configuration. Port1 and port2 are member interfaces of the SD-WAN, and port2 becomes a dead member after reaching the failure thresholds Which statement about the dead member is correct?

  A. Subnets 100 .64.1.0/23 and 172 . 20 . 0. 0/16 are reachable only through port1

  B. SD-WAN interface becomes disabled and port1 becomes the WAN interface

  C. Dead members require manual administrator access to bring them back alive

  D. Port2 might become alive when a single response is received from an SLA server

  Correct Answer: A

• Question 20:

  Refer to the exhibit.

  

  Which are two expected behaviors of the traffic that matches the traffic shaper? (Choose two.)

  A. The traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.

  B. The number of simultaneous connections among all source IP addresses can exceed 5 connections.

  C. The number of simultaneous connections allowed for each source IP address can exceed 5 connections.

  D. The traffic shaper limits the combined bandwidth of all connections to a maximum of 5 MB/sec.

  Correct Answer: AB