最新的NSE 7 Network Security Architect認證 NSE7_SSE_AR-26考試題庫

問題1

Which FortiSASE deployment component is responsible for terminating IPsec or SSL VPN tunnels from remote branch FortiGate devices in an SD-WAN hub-and-spoke topology?

A. FortiSASE Security PoP

B. Digital Experience Monitoring agent

C. Zero Trust Network Access proxy

D. Secure Private Access gateway

正確答案: A

說明：（僅 VCESoft 成員可見）

問題2

What are three key routing principles of SD-WAN? (Choose three.)

A. Routes to directly connected subnets have precedence over SD-WAN rules.

B. SD-WAN rules are skipped if the best route to the destination is a static route.

C. Internet Service Database (ISDB) routes have precedence over SD-WAN rules.

D. SD-WAN members are skipped if they do not have a valid route to the destination.

E. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

正確答案: C,D,E

說明：（僅 VCESoft 成員可見）

問題3

What are two benefits of deploying secure private access with SD-WAN? (Choose two.)

A. ZTNA posture check performed by the hub FortiGate

B. Inline security inspection by FortiSASE

C. Support of both TCP and UDP applications

D. A direct access proxy tunnel from FortiClient to the on-premises FortiGate

正確答案: B,C

說明：（僅 VCESoft 成員可見）

問題4

When designing a dual-hub SD-WAN architecture with FortiSASE, which two factors should be considered to ensure redundancy? (Choose two.)

A. Using SD-WAN rules that reference both hub overlays

B. Disabling health checks on the secondary hub

C. Configuring BGP with different local preferences per hub

D. Ensuring both hubs advertise identical route metrics only

正確答案: A,C

說明：（僅 VCESoft 成員可見）

問題5

Which two factors influence the decision to use a single-hub versus dual-hub SD-WAN topology in a FortiSASE architecture? (Choose two.)

A. The geographic distribution and redundancy requirements of branch sites

B. The color scheme configured on the FortiGate GUI

C. The organization's tolerance for a single point of failure

D. The number of DNS servers configured locally

正確答案: A,C

說明：（僅 VCESoft 成員可見）

問題6

In an enterprise deployment of FortiSASE, single sign-on (SSO) is used to streamline user authentication across security services. Which statement correctly describes an SSO capability on FortiSASE?

A. It allows authentication to be delegated to an external identity provider such as Azure AD or SAML-based identity providers (IdPs).

B. It bypasses identity verification when users access trusted networks.

C. It requires users to authenticate separately for each security service for improved segmentation.

D. It stores user credentials locally on FortiSASE to reduce dependency on external systems.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題7

What does FortiSASE do with multi-exit discriminator (MED) values received from hubs that are in different autonomous systems (AS)?

A. FortiSASE compares MED values across different AS and selects the path with the highest MED.

B. FortiSASE ignores MED values when they are received from hubs in different AS.

C. FortiSASE converts MED values into local preference to compare paths across AS.

D. FortiSASE always prefers the path with the highest MED, regardless of AS.

正確答案: B

說明：（僅 VCESoft 成員可見）

最新的Fortinet NSE 7 - FortiSASE 26 Architect - NSE7_SSE_AR-26免費考試真題

最新更新

站內鏈接

聯系我們