Fortinet Fortinet Certifications NSE7_SDW-6.4 Questions & Answers

• Question 51:

  Refer to the exhibit.

  

  Based on output shown in the exhibit, which two commands can be used by SD-WAN rules? (Choose two.)

  A. set cost 15.

  B. set source 100.64.1.1.

  C. set priority 10.

  D. set load-balance-mode source-ip-based.

  Correct Answer: CD

• Question 52:

  Refer to the exhibit.

  

  Which statement about the trace evaluation by FortiGate is true?

  A. Packets exceeding the configured maximum concurrent connection limit are denied by the per-IP shaper.

  B. The packet exceeded the configured bandwidth and was dropped based on the priority configuration.

  C. The packet exceeded the configured maximum bandwidth and was dropped by the shared shaper.

  D. Packets exceeding the configured concurrent connection limit are dropped based on the priority configuration.

  Correct Answer: A

  SD-WAN 6.4.5 Study Guide. pg 137

• Question 53:

  Which three protocols are available only on the command line to configure as performance SLA status check? (Choose three.)

  A. smtp

  B. tcp-echo

  C. twamp

  D. udp-echo

  E. icmp

  Correct Answer: BCD

• Question 54:

  Refer to the exhibit.

  

  Which two statements about the status of the VPN tunnel are true?

  A. There are separate virtual interfaces for each dial-up client.

  B. VPN static routes are prevented from populating the FortiGate routing table.

  C. FortiGate created a single IPsec virtual interface that is shared by all clients.

  D. 100.64.3.1 is one of the remote IP address that comes through index interface 1.

  Correct Answer: CD

  If net-device is disabled, FortiGate creates a single IPSEC virtual interface that is shared by all IPSEC clients connecting to the same dialup VPN. In this case, the tunnel-search setting determines how FortiGate learns the network behind each remote client.

• Question 55:

  What is the purpose of a predefined template on the FortiAnalyzer?

  A. It can be edited and modified as required

  B. It specifies the report layout which contains predefined texts, charts, and macros

  C. It specifies report settings which contains time period, device selection, and schedule

  D. It contains predefined data to generate mock reports

  Correct Answer: B

  FortiAnalyzer 6.4 Study Guide page 197

• Question 56:

  Which feature enables SD-WAN to combine IPsec VPN dynamic shortcut tunnels between spokes and a static tunnel to the hub?

  A. ADVPN

  B. GRE

  C. SSLVPN

  D. OCVPN

  Correct Answer: A

• Question 57:

  Refer to Exhibit:

  

  Based on the exhibit, which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules, among the member interfaces?

  A. All traffic from a source IP to a destination IP Is sent to the same interface.

  B. All traffic from a source IP Is sent to the most used Interface.

  C. All traffic from a source IP to a destination IP is sent to the least used interface.

  D. All traffic from a source IP is sent to the same interfaces.

  Correct Answer: A

• Question 58:

  Refer to the exhibit.

  

  Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

  A. Set priority 10.

  B. Set cost 15.

  C. Set load-balance-mode source-ip-ip-based.

  D. Set source 100.64.1.1.

  Correct Answer: AB

• Question 59:

  Refer to the exhibit.

  

  Which two statements about the debug output are true? (Choose two)

  A. The debug output shows per-IP shaper values and real-time readings.

  B. FortiGate provides statistics and reading based on historical traffic logs.

  C. Traffic being controlled by the traffic shaper is under 100 KB/s.

  D. This traffic shaper drops traffic that exceeds the set limits.

  Correct Answer: CD

• Question 60:

  Refer to the exhibit.

  

  Which conclusion about the packet debug flow output is correct?

  A. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

  B. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the firewall policy, and the packet was dropped.

  C. The packet size exceeded the outgoing interface MTU.

  D. The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

  Correct Answer: A