最新的Fortinet NSE 6認證 NSE6_SDW_AD-7.6考試題庫

問題1

Which two statements are correct when traffic matches the implicit SD-WAN rule? (Choose two.)

A. The session information output displays no SD-WAN-specific details.

B. Traffic is load balanced using the algorithm set for the v4-ecmp-mode setting.

C. All SD-WAN rules have the default and gateway setting enabled.

D. Traffic does not match any of the entries in the policy route table.

正確答案: A,D

說明：（僅 VCESoft 成員可見）

問題2

What is true about SD-WAN multiregion topologies?

A. Each region has its own SD-WAN topology.

B. It is not compatible with ADVPN.

C. Routing between the hub and spokes must be BGP.

D. Regions must correspond to geographical areas.

正確答案: A

問題3

Refer to the exhibits.
SD-WAN overlay template advanced settings

Underlay and network advertisement configuration

The SD-WAN overlay template, advanced settings, and the underlay and network advertisement settings are shown.
These are the configurations for the secondary hub of a dual-hub SD-WAN topology created with the FortiManager SD-WAN overlay orchestrator.
Which two conclusions can you draw from the information shown in the exhibits? (Choose two.)

A. FortiManager will create an overlay tunnel on the port2 interface.

B. FortiManager will create an overlay tunnel on the port1 interface.

C. FortiManager will define port5 as a BGP neighbor.

D. FortiManager will define port2 as a BGP neighbor.

正確答案: A,B

說明：（僅 VCESoft 成員可見）

問題4

The administrator uses the FortiManager SD-WAN overlay template to prepare an SD-WAN deployment. Using information provided through the SD-WAN overlay template wizard, FortiManager creates templates ready to install on the spoke and hub devices.
What are the three templates created by the SD-WAN overlay template for a spoke device?
(Choose three.)

A. CLI template

B. Rules template

C. Static route template

D. BGP template

E. IPsec tunnel template

正確答案: A,D,E

說明：（僅 VCESoft 成員可見）

問題5

You plan a large SD-WAN deployment for a global company. You want to divide the network architecture into five geographical regions and install two hubs in each region for increased redundancy.
You expect a significant amount of traffic within each region and limited traffic flow between spokes in different regions. You plan to connect the small branch sites to only the closest hub in their regions and the large branch sites to the two hubs in the regions.
Which statement about your plan is true?

A. It is possible. You should use FortiManager and the overlay orchestrator multihub topology to simplify the deployment.

B. It is possible. You should use EBGP as the routing protocol between the regions.

C. It is not possible. In a region, all spokes must have either single-hub or dual-hub connectivity.

D. It is not possible. FortiOS 7.6 supports multihub topologies with up to four hubs.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題6

Refer to the exhibit.

Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2.
Which two configuration settings are required for the spoke A1 to establish an ADVPN shortcut with the spoke B2? (Choose two.)

A. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to spokes.

B. On hubs, auto-discovery-receiver must be enabled on the IPsec VPNs to spokes.

C. On hubs, auto-discovery-sender must be enabled on the IPsec VPNs to spokes.

D. On hubs, auto-discovery-forwarder must be enabled on the IPsec VPNs to hubs.

正確答案: A,C

說明：（僅 VCESoft 成員可見）

問題7

Refer to the exhibit.
An SD-WAN zone configuration on the FortiGate GUI is shown.

What can you conclude about the zone and member configuration on this device?

A. The WAN2 zone contains no member.

B. You can delete the virtual-wan-link zone.

C. You can delete the WAN1 zone.

D. You can add the member B-125 to the WAN3 zone and keep it as a member of the Test zone.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題8

Refer to the exhibits.

You connect to a device behind branch1_fgt, a branch FortiGate device, and initiate a ping test.
The device is part of the LAN subnet and its IP address is 10.0.1.101.
Based on the exhibits, which interface uses branch1_fgt to steer the test traffic?

A. port1

B. port4

C. port2

D. HUB1-VPN1

正確答案: C

說明：（僅 VCESoft 成員可見）

問題9

An MSSP uses FortiManager to manage the FortiGate devices of its customers. The administrator grouped the devices for each customer in different ADOMs. For customer A, you configured one SD-WAN overlay template that applies to all devices in the ADOM. For customer B, you configured SD-WAN for DIA at the device level, with a different configuration for each FortiGate. You onboard customer C, a car manufacturer, who requests to have a single-hub SD- WAN topology for its retail points, and a dual-hub topology for the FortiGate devices installed in its factories. Which statement best describes how you should handle this request?

A. You can place all the devices in the same ADOM and define two topologies with the SD-WAN overlay template.

B. You can place all the devices in the same ADOM, but you must use the SD-WAN overlay template to define only one topology.

C. You must assign the devices to different ADOMs to avoid conflicts between the single-hub and dual-hub SD-WAN topologies.

D. You can place all the devices in the same ADOM and you can create multiple SD-WAN templates, but you cannot use the SD-WAN overlay template.

正確答案: B

說明：（僅 VCESoft 成員可見）

最新的Fortinet NSE 6 - SD-WAN 7.6 Enterprise Administrator - NSE6_SDW_AD-7.6免費考試真題

最新更新

站內鏈接

聯系我們