최신 NSE7_SDW-7.0 무료덤프 - Fortinet NSE 7

문제1

Refer to the exhibits.

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups.
Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)

A. London generates an IKE information message that contains the Toronto public IP address.

B. Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.

C. Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.

D. The first packets from Toronto to London are routed through Hub 1 then to Hub 2.

정답: C,D

문제2

Which are two benefits of using CLI templates in FortiManager? (Choose two.)

A. You can configure interfaces as SD-WAN members without having to remove references first.

B. You can configure FortiManager to sync local configuration changes made on the managed device, to the CLI template.

C. You can reference meta fields.

D. You can configure advanced CLI settings.

정답: C,D

문제3

Refer to the exhibits.
Exhibit A

Exhibit B -

Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status.
The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule.
Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

A. The traffic will be load balanced across all three overlays.

B. The traffic will be routed over T_INET_1_0.

C. The traffic will be routed over T_MPLS_0.

D. The traffic will be routed over T_INET_0_0.

정답: B

문제4

What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

A. It improves SD-WAN performance on the managed FortiGate devices.

B. It acts as a policy compliance entity to review all managed FortiGate devices.

C. It sends probe signals as health checks to the beacon servers on behalf of FortiGate.

D. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.

E. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.

정답: D,E

문제5

Refer to the exhibits.

Which conclusion about the packet debug flow output is correct?

A. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

B. The packet size exceeded the outgoing interface MTU.

C. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the firewall policy, and the packet was dropped.

D. The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Refer to the exhibit.

The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate appliance that supports hardware offloading. Based on the information shown in the exhibits, which two statements about the session are true? (Choose two.)

A. The reply direction of the asymmetric traffic flows from port2 to port3.

B. The auxiliary session can be offloaded to hardware.

C. The original direction of the symmetric traffic flows from port3 to port2.

D. The main session cannot be offloaded to hardware.

정답: A,B

문제7

Which statement about using BGP for ADVPN is true?

A. You must use BGP to route traffic for both overlay and underlay links.

B. You must configure AS path prepending.

C. You must configure BGP communities.

D. IBGP is preferred over EBGP, because IBGP preserves next hop information.

정답: D

최신 NSE7_SDW-7.0 무료덤프 - Fortinet NSE 7 - SD-WAN 7.0

우리와 연락하기

유용한 링크

최신 업데이트