最新的NSE 7 Network Security Architect認證 NSE7_SDW-6.4考試題庫

問題1

Which three performance SLA protocols are available on the FortiGate CLI only? (Choose three.)

A. smtp

B. twamp

C. icmp

D. tcp-echo

E. udp-echo

正確答案: B,D,E

說明：（僅 VCESoft 成員可見）

問題2

Which statement defines how a per-IP traffic shaper of 10 Mbps is applied to the entire network?

A. The 10 Mbps bandwidth is shared equally among the IP addresses.

B. FortiGate allocates each IP address a maximum 10 Mbps of bandwidth.

C. Each IP is guaranteed a minimum 10 Mbps of bandwidth

D. A single user uses the allocated bandwidth divided by total number of users.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題3

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

A. The zero-touch provisioning process has completed internally, behind FortiGate.

B. A factory reset performed on FortiGate.

C. FortiGate has obtained a configuration from the platform template in FortiGate cloud.

D. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager

E. The FortiGate cloud key has not been added to the FortiGate cloud portal.

正確答案: A,E

問題4

Refer to the exhibit.

Which statement about the command route-tag in the SD-WAN rule is true?

A. It enables the SD-WAN rule to load balance and assign traffic with a route tag

B. It tags each route and references the tag in the routing table.

C. It uses route tags for a BGP community and assigns the SD-WAN rules with same tag.

D. It ensures route tags match the SD-WAN rule based on the rule order

正確答案: C

說明：（僅 VCESoft 成員可見）

問題5

Refer to the exhibit

Based on the exhibit, which two statements about existing sessions on FortiGate after a firewall policy change, are true?(Choose two.)

A. All sessions are flushed by FortiGate after a policy change

B. The old sessions terminate after a policy change

C. Existing sessions remain unchanged after a policy change

D. FortiGate re-evaluates new packets after a policy change

正確答案: C,D

問題6

Refer to the exhibits.
Exhibit A:

Exhibit B:

Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate distributes traffic.
Based on the exhibits, what are two expected behaviors when FortiGate processes SD-WAN traffic? (Choose two.)

A. The first Vimeo session may not match the Vimeo SD-WAN rule because the session is used for the application learning phase.

B. SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.

C. The Vimeo SD-WAN rule steers Vimeo application traffic among all SD-WAN member interfaces.

D. The implicit rule overrides all other rules because parameters widely cover sources and destinations.

正確答案: A,B

問題7

Refer to the exhibit.

What must you configure to enable ADVPN?

A. ADVPN should only be enabled on unmanaged FortiGate devices.

B. On the hub VPN, only the device needs additional phase one sett

C. The protected subnets should be set to address object to all (0.0 .0. 0/0).

D. Each VPN device has a unique pre-shared key configured separately on phase one

正確答案: C

說明：（僅 VCESoft 成員可見）

問題8

When attempting to establish an IPsec tunnel to FortiGate, all remote users match the FIRST_VPN IPsec VPN. This includes remote users that want to connect to the SECOND_VPN IPsec VPN. Which two configuration changes must you make on both IPsec VPNs so that remote users can connect to their intended IPsec VPN? (Choose two.)

A. Configure a unique peer ID.

B. Change the IKE mode to aggressive.

C. Configure different Diffie Hellman groups.

D. Configure different proposals.

正確答案: A,B

說明：（僅 VCESoft 成員可見）

問題9

Which three parameters are available to configure SD-WAN rules? (Choose three.)

A. URL categories

B. Source and destination IP address

C. Internet service database (ISDB) address object

D. Application signatures

E. Type of physical link connection

正確答案: B,C,D

說明：（僅 VCESoft 成員可見）

最新的Fortinet NSE 7 - SD-WAN 6.4 - NSE7_SDW-6.4免費考試真題

最新更新

站內鏈接

聯系我們