Fortinet Fortinet Certifications NSE7_SDW-7.0 Questions & Answers

• Question 31:

  Refer to the exhibit.

  

  Based on the output, which two conclusions are true? (Choose two.)

  A. The all_rules rule represents the implicit SD-WAN rule.

  B. There is more than one SD-WAN rule configured.

  C. Entry 1 (id=1) is a regular policy route.

  D. The SD-WAN rules takes precedence over regular policy routes.

  Correct Answer: BC

• Question 32:

  Which two configuration tasks are required to use SD-WAN? (Choose two.)

  A. Add one or more members to an SD-WAN zone.

  B. Configure at least one firewall policy for SD-WAN traffic.

  C. Specify the outgoing interface routing cost.

  D. Specify the incoming interfaces in SD-WAN rules.

  Correct Answer: AB

• Question 33:

  Which statement is correct about the SD-WAN and ADVPN?

  A. ADVPN interface can be a member of SD-WAN interface.

  B. Dynamic VPN is not supported as an SD-Wan interface.

  C. Spoke support dynamic VPN as a static interface.

  D. Hub FortiGate is limited to use ADVPN as SD-WAN member interface.

  Correct Answer: A

• Question 34:

  Which two reasons make forward error correction (FEC) ideal to enable in a phase one VPN interface? (Choose two )

  A. FEC transmits the original payload in full to recover the error in transmission.

  B. FEC improves reliability which overcomes adverse WAN conditions such as noisy links.

  C. FEC is useful to increase speed at which traffic is routed through IPsec tunnels.

  D. FEC transmits additional packets as redundant data to the remote device.

  E. FEC reduces the stress on the remote device jitter buffer to reconstruct packet loss

  Correct Answer: BD

• Question 35:

  Which two interfaces are considered overlay links? (Choose two.)

  A. IPsec

  B. Physical

  C. LAG

  D. GRE

  Correct Answer: AD

• Question 36:

  Refer to the exhibit

  

  Which statement about the ADVPN device role in handling traffic is true?

  A. Two spokes 100.64.3.1 and 10.1.2. 254 forward their queries to their hubs

  B. This is a hub that has received a query from a spoke and has forwarded it to another spoke

  C. This is a spoke that has received a query from a remote hub and has forwarded the response to its hub

  D. Two hubs. 10.1.1.254 and 10.1.2.254, are receiving and forwarding queries between each other

  Correct Answer: B

• Question 37:

  What are two reasons why it is effective to implement the internet service database (ISDB) in an SD-WAN rule? (Choose two )

  A. The ISDB is dynamically updated and reduces administrative overhead.

  B. The ISDB applies rules to traffic from specific sources, based on application type.

  C. The ISDB requires application control to maintain signatures and perform load-balancing.

  D. The ISDB contains the IP addresses and port ranges of well-known destinations.

  Correct Answer: AD

• Question 38:

  Which statement about using BGP routes in SD-WAN is true?

  A. Adding static routes must be enabled on all ADVPN interfaces.

  B. VPN topologies must be form using only BGP dynamic routing with SD-WAN

  C. Learned routes can be used as dynamic destinations in SD-WAN rules

  D. Dynamic routing protocols can be used only with non-encrypted traffic

  Correct Answer: C

• Question 39:

  An administrator is troubleshooting VoIP quality issues that occur when calling external phone numbers The SD-WAN interface on the edge FortiGate is configured with the default settings, and is using two upstream links One link has random jitter and latency issues and is based on a wireless connection

  Which two actions must the administrator apply simultaneously on the edge FortiGate to improve VoIP quality using SD_WAN rules?

  A. Select the corresponding SD-WAN balancing strategy in the SD-WAN rule.

  B. Choose the suitable interface based on the interface cost and weight.

  C. Use the performance SLA targets to detect latency and jitter instantly.

  D. Place the troublesome link at the top of the interface preference list.

  E. Configure an SD-WAN rule to load balance all traffic without VoIP.

  Correct Answer: AC

• Question 40:

  Which two tasks about using central VPN management are true? (Choose two.)

  A. You can configure full mesh, star, and dial-up VPN topologies.

  B. FortiManager installs VPN settings on both managed and external gateways.

  C. You configure VPN communities to define common IPsec settings shared by all VPN gateways.

  D. You must enable VPN zones for SD-WAN deployments.

  Correct Answer: AC