Fortinet NSE7_SDW-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE7_SDW-7.0 Online Questions & Answers

• Question 111:

  Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

  A. A peer ID is included in the first packet from the initiator, along with suggested security policies.
  B. XAuth is enabled as an additional level of authentication, which requires a username and password.
  C. A total of six packets are exchanged between an initiator and a responder instead of three packets.
  D. The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.
  A. A peer ID is included in the first packet from the initiator, along with suggested security policies.
  C. A total of six packets are exchanged between an initiator and a responder instead of three packets.

  ---

  Explanation/Reference:

• Question 112:

  Refer to the exhibits.

  Exhibit A

  

  Exhibit B

  

  Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status.

  The administrator wants to understand the expected behavior for traffic matching the SD- WAN rule.

  Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

  A. The traffic will be load balanced across all three overlays.
  B. The traffic will be routed over T_INET_0_0.
  C. The traffic will be routed over T_MPLS_0.
  D. The traffic will be routed over T_INET_1_0.
  D. The traffic will be routed over T_INET_1_0.

  ---

  Explanation/Reference:

• Question 113:

  Which diagnostic command can you use to show interface-specific SLA logs for the last 10 minutes?

  A. diagnose sys sdwan log
  B. diagnose sys sdwan health-check
  C. diagnose sys sdwan intf-sla-log
  D. diagnose sys sdwan sla-log
  C. diagnose sys sdwan intf-sla-log

  ---

  Explanation/Reference:

  C is correct as diagnose sys sdwan sla-log used to check SLA metrics for last 10 minutes

• Question 114:

  Which two statements describe how IPsec phase 1 aggressive mode is different from main mode when performing IKE negotiation? (Choose two)

  A. A peer ID is included in the first packet from the initiator, along with suggested security policies.
  B. XAuth is enabled as an additional level of authentication, which requires a username and password.
  C. A total of six packets are exchanged between an initiator and a responder instead of three packets.
  D. The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.
  A. A peer ID is included in the first packet from the initiator, along with suggested security policies.
  C. A total of six packets are exchanged between an initiator and a responder instead of three packets.

  ---

  Explanation/Reference:

• Question 115:

  Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)

  A. update-source
  B. set-route-tag
  C. holdtime-timer
  D. link-down-failover
  C. holdtime-timer
  D. link-down-failover