최신 NSE7_SDW-7.0 무료덤프 - Fortinet NSE 7

문제1

Refer to the exhibits.
Exhibit A -

Exhibit B -

Exhibit A shows the traffic shaping policy and exhibit B shows the firewall policy.
The administrator wants FortiGate to limit the bandwidth used by YouTube. When testing, the administrator determines that FortiGate does not apply traffic shaping on YouTube traffic.
Based on the policies shown in the exhibits, what configuration change must be made so FortiGate performs traffic shaping on YouTube traffic?

A. Web filtering must be enabled on the firewall policy.

B. Individual SD-WAN members must be selected as the outgoing interface on the traffic shaping policy.

C. Destination internet service must be enabled on the traffic shaping policy.

D. Application control must be enabled on the firewall policy.

정답: D

문제2

Refer to the exhibit.

Based on the exhibit, which action does FortiGate take?

A. FortiGate bounces port5 after it detects all SD-WAN members as dead.

B. FortiGate brings down port5 after it detects all SD-WAN members as dead.

C. FortiGate fails over to the secondary device after it detects all SD-WAN members as dead.

D. FortiGate brings up port5 after it detects all SD-WAN members as alive.

정답: C

문제3

Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)

A. Internet Key Exchange (IKE)

B. Encapsulating Security Payload (ESP)

C. Secure Shell (SSH)

D. Security Association (SA)

정답: A,B

문제4

Which statement about using BGP for ADVPN is true?

A. You must use BGP to route traffic for both overlay and underlay links.

B. You must configure AS path prepending.

C. You must configure BGP communities.

D. IBGP is preferred over EBGP, because IBGP preserves next hop information.

정답: D

문제5

Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?

A. You must set ike-version to 1.

B. You must enable auto-discovery-sender.

C. You must disable idle-timeout.

D. You must enable net-device.

정답: D

문제6

Refer to the exhibit.

The exhibit shows the SD-WAN rule status and configuration.
Based on the exhibit, which change in the measured packet loss will make T_INET_1_0 the new preferred member?

A. When T_INET_1_0 has 4% packet loss.

B. When all three members have the same packet loss.

C. When T_INET_0_0 has 4% packet loss.

D. When T_INET_0_0 has 12% packet loss.

정답: B

문제7

Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)

A. holdtime-timer

B. link-down-failover

C. update-source

D. set-route-tag

정답: A,B

최신 NSE7_SDW-7.0 무료덤프 - Fortinet NSE 7 - SD-WAN 7.0

우리와 연락하기

유용한 링크

최신 업데이트