최신 NSE7_SDW-6.4 무료덤프 - Fortinet NSE 7

문제1

Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

A. XAuth is enabled as an additional level of authentication, which requires a username and password.

B. The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

C. A total of six packets are exchanged between an initiator and a responder instead of three packets.

D. A peer ID is included in the first packet from the initiator, along with suggested security policies.

정답: A,C

문제2

Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

A. Set load-balance-mode source-ip-ip-based.

B. Set source 100.64.1.1.

C. Set cost 15.

D. Set priority 10.

정답: C,D

문제3

In which two ways does FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning? (Choose two.)

A. From the central management configuration configured in FortiDeploy

B. From a FortiGuard definitions update

C. From a DHCP server configured with options 240 or 241

D. From another FortiGate device in the same local network

정답: A,C

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Refer to exhibits.

Exhibit A shows the performance SLA exhibit B shows the SD-WAN diagnostics output.
Based on the exhibits, which statement is correct?

A. The SLA state of port1 is dead after five unanswered requests by the SLA servers.

B. SD-WAN member interfaces are affected by the SLA state of the inactive interface

C. Port1 became dead 1ecause no traffic was offload through the egress of port1.

D. Both SD-WAN member interfaces have used separate SLA targets.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Refer to the exhibit.

Which are two expected behaviors of the traffic that matches the traffic shaper? (Choose two.)

A. The traffic shaper limits the combined bandwidth of all connections to a maximum of 5 MB/sec.

B. The traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.

C. The number of simultaneous connections among all source IP addresses can exceed 5 connections.

D. The number of simultaneous connections allowed for each source IP address can exceed 5 connections.

정답: B,C

문제6

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

A. A factory reset performed on FortiGate.

B. The FortiGate cloud key has not been added to the FortiGate cloud portal.

C. FortiGate has obtained a configuration from the platform template in FortiGate cloud.

D. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager

E. The zero-touch provisioning process has completed internally, behind FortiGate.

정답: B,E

문제7

Which two interfaces are considered overlay links? (Choose two.)

A. LAG

B. IPsec

C. GRE

D. Physical

정답: B,C

문제8

Refer to exhibits.

Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)

A. All the existing sessions will be blocked from using port1 and port2.

B. All the existing sessions will continue to use port2, and new sessions will use port1.

C. All the existing sessions that do not use SNAT will be flushed and routed through port1.

D. All the existing sessions using SNAT will be flushed and routed through port1.

정답: C,D

최신 NSE7_SDW-6.4 무료덤프 - Fortinet NSE 7 - SD-WAN 6.4

우리와 연락하기

유용한 링크

최신 업데이트