Fortinet NSE7_SDW-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE7_SDW-6.4 Online Questions & Answers

• Question 51:

  Which statement is correct about SD-WAN and ADVPN?

  A. You must use OSPF.
  B. SD-WAN can steer traffic to ADVPN shortcuts established over IPsec overlays configured as SD-WAN members.
  C. Routes for ADVPN shortcuts must be manually configured.
  D. SD-WAN does not monitor the health and performance of ADVPN shortcuts.
  B. SD-WAN can steer traffic to ADVPN shortcuts established over IPsec overlays configured as SD-WAN members.

• Question 52:

  Refer to the exhibit.

  

  Which two statements about the debug output are correct? (Choose two )

  A. The debug output shows per-IP shaper values and real-time readings.
  B. This traffic shaper drops traffic that exceeds the set limits.
  C. Traffic being controlled by the traffic shaper is under 1 Kbps.
  D. FortiGate provides statistics and reading based on historical traffic logs.
  A. The debug output shows per-IP shaper values and real-time readings.
  B. This traffic shaper drops traffic that exceeds the set limits.

• Question 53:

  What are two reasons why it is effective to implement the internet service database (ISDB) in an SD-WAN rule? (Choose two )

  A. The ISDB is dynamically updated and reduces administrative overhead.
  B. The ISDB applies rules to traffic from specific sources, based on application type.
  C. The ISDB requires application control to maintain signatures and perform load-balancing.
  D. The ISDB contains the IP addresses and port ranges of well-known destinations.
  A. The ISDB is dynamically updated and reduces administrative overhead.
  D. The ISDB contains the IP addresses and port ranges of well-known destinations.

• Question 54:

  Refer to the exhibit.

  Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2 The administrator configured ADVPN on the dual regions topology

  

  Which two statements are correct if a user in Toronto sends traffic to London? (Choose two )

  A. Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.
  B. The first packets from Toronto to London are routed through Hub 1 then to Hub 2.
  C. London generates an IKE information message that contains the Toronto public IP address.
  D. Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.
  B. The first packets from Toronto to London are routed through Hub 1 then to Hub 2.
  D. Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.

• Question 55:

  What is the lnkmtd process responsible for?

  A. Monitoring links for any bandwidth saturation
  B. Processing performance SLA probes
  C. Flushing route tags addresses
  D. Logging interface quality information
  B. Processing performance SLA probes

• Question 56:

  Which two reasons make forward error correction (FEC) ideal to enable in a phase one VPN interface? (Choose two )

  A. FEC transmits the original payload in full to recover the error in transmission.
  B. FEC improves reliability which overcomes adverse WAN conditions such as noisy links.
  C. FEC is useful to increase speed at which traffic is routed through IPsec tunnels.
  D. FEC transmits additional packets as redundant data to the remote device.
  E. FEC reduces the stress on the remote device jitter buffer to reconstruct packet loss
  B. FEC improves reliability which overcomes adverse WAN conditions such as noisy links.
  D. FEC transmits additional packets as redundant data to the remote device.

• Question 57:

  Which two statements about SD-WAN central management are true? (Choose two.)

  A. It does not allow you to monitor the status of SD-WAN members.
  B. It is enabled or disabled on a per-ADOM basis.
  C. It is enabled by default.
  D. It uses templates to configure SD-WAN on managed devices.
  B. It is enabled or disabled on a per-ADOM basis.
  D. It uses templates to configure SD-WAN on managed devices.

• Question 58:

  Which three performance SLA protocols are available on the FortiGate CLI only? (Choose three.)

  A. tcp-echo
  B. icmp
  C. twamp
  D. udp-echo
  E. smtp
  A. tcp-echo
  C. twamp
  D. udp-echo

• Question 59:

  What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

  A. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.
  B. It improves SD-WAN performance on the managed FortiGate devices.
  C. It sends probe signals as health checks to the beacon servers on behalf of FortiGate.
  D. It acts as a policy compliance entity to review all managed FortiGate devices.
  E. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.
  A. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.
  E. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.

• Question 60:

  An administrator is troubleshooting VoIP quality issues that occur when calling external phone numbers The SD-WAN interface on the edge FortiGate is configured with the default settings, and is using two upstream links One link has random jitter and latency issues and is based on a wireless connection

  Which two actions must the administrator apply simultaneously on the edge FortiGate to improve VoIP quality using SD_WAN rules?

  A. Select the corresponding SD-WAN balancing strategy in the SD-WAN rule.
  B. Choose the suitable interface based on the interface cost and weight.
  C. Use the performance SLA targets to detect latency and jitter instantly.
  D. Place the troublesome link at the top of the interface preference list.
  E. Configure an SD-WAN rule to load balance all traffic without VoIP.
  A. Select the corresponding SD-WAN balancing strategy in the SD-WAN rule.
  C. Use the performance SLA targets to detect latency and jitter instantly.