最新的NSE 7 Network Security Architect認證 NSE7_SSE_AR-26考試題庫

問題1

What are three characteristics of the provisioning templates available on FortiManager? (Choose three.)

A. A CLI template can be of type CLI script or Perl script.

B. Each template group can contain up to three IPsec tunnel templates.

C. A CLI template group can contain CLI templates of different types.

D. CLI templates are applied in order, from top to bottom.

E. A template group can include a system template and an SD-WAN template.

正確答案: C,D,E

說明：（僅 VCESoft 成員可見）

問題2

During the implementation of endpoint-based access controls on FortiSASE, an administrator must determine how security posture tags will improve policy enforcement and performance across managed devices.
In this context, what are two advantages of using security posture tags? (Choose two.)

A. Security posture tags can be used to allow or deny access to network resources.

B. Security posture tags can help monitor endpoint system resource use.

C. Security posture tags can be assigned to endpoint profiles based on user groups.

D. Security posture tags can determine the security posture of an endpoint.

正確答案: A,D

說明：（僅 VCESoft 成員可見）

問題3

An SD-WAN member is no longer used to steer SD-WAN traffic. The administrator updated the SD-WAN configuration and deleted the unused member. After the configuration update, users report that some destinations are unreachable. You confirm that the affected flow does not match an SD-WAN rule. What could be a possible cause of the traffic interruption?

A. FortiGate removes the layer 3 settings for interfaces that are removed from the SD-WAN configuration.

B. FortiGate, with SD-WAN enabled, cannot route traffic through interfaces that are not SD-WAN members.

C. FortiGate administratively brings down interfaces when they are removed from the SD-WAN configuration.

D. FortiGate can remove some static routes associated with an interface when the member is removed from SD-WAN.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題4

Refer to the exhibit. What conclusions can you draw about the traffic received by FortiGate originating from the source LAN device 10.0.1.133 and destined for the company's SMTP mail server at 10.66.0.125?

Exhibit 1

A. FortiGate steers the traffic from the LAN device 10.0.1.133 to the SMTP mail server 10.66.0.125 through the SD-WAN member ID 1 or 2.

B. FortiGate steers the traffic from the LAN device 10.0.1.133 to the company SMTP mail server 10.66
0.125 through port3.

C. ForliGate steers the traffic from the LAN device 10.0.1.133 to the company SMTP mail server
10.66.0.125 through port2.

D. FortiGate steers the traffic from the LAN device 10.0.1.133 to the company SMTP mail server
10.66.0.125 through the SD-WAN member ID 4.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題5

Refer to the exhibits. You collected the output shown in the exhibits and want to know which interface TCP traffic will flow through from the user device 10.0.1.101 to the corporate file server 10.0.0.125. All SD-WAN links are stable. Which interface will FortiGate use to steer the traffic? Choose one answer.

Exhibit 1

A. Either HUB1-VPN1 or HUB1-VPN2

B. Either HUB1-VPN1, HUB1-VPN2, or HUB1-VPN3

C. Only HUB1-VPN1

D. Only HUB1-VPN2

正確答案: A

說明：（僅 VCESoft 成員可見）

問題6

Refer to the exhibit that shows event logs on FortiGate. Based on the output shown in the exhibit, what can you say about the tunnels on this device?

Exhibit 1

A. There is one shortcut tunnel built from master tunnel VPN4.

B. The master tunnel HUB2-VPN3 cannot accept ADVPN shortcuts.

C. The VPN tunnel HUB1-VPN1_0 is a shortcut tunnel.

D. The device steers voice traffic through the VPN tunnel HUB1-VPN3.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題7

Refer to the exhibits, which show the configuration of an SD-WAN rule and the corresponding rule status and routing table. The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule. Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

Exhibit 1

Exhibit 2

A. The traffic will be routed over HUB1-VPN3.

B. The traffic will be routed over HUB1-VPN1.

C. The traffic will be routed over HUB1-VPN2

D. The traffic will be load balanced across all three overlays

正確答案: C

說明：（僅 VCESoft 成員可見）

問題8

Which two matching traffic criteria are available to steer traffic in SD-WAN rules?

A. Application categories

B. BGP attributes

C. Internet Service Database (ISDB)

D. Physical interface type

正確答案: A,C

說明：（僅 VCESoft 成員可見）

問題9

Refer to the exhibits. The exhibits show two IPsec templates to define Branch IPsec 1 and Branch_IPsec_2.
Each template defines a VPN tunnel. The error message that FortiManager displayed when the administrator tried to assign the second template to the FortiGate device is also shown. Which statement best describes the cause of the issue?

Exhibit 1

A. You can assign only one template with a tunnel type of static to each FortiGate device.

B. You can assign only one IPsec template to each FortiGate device.

C. You should use the same outgoing interface of both templates.

D. You should review the branch1_fgt configuration for configured tunnels in the rootVDOM.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題10

Refer to the exhibits.

The exhibits show an SD-WAN zone HUB1 and SD-WAN member configuration from an SD-WAN template and the output of command diagnose sys sdwan member collected on a FortiGate device.
Which statement best describes what the diagnose output shows?

A. The diagnose output was collected on the device branch1_fgt.

B. The diagnose output was collected on the device branch2_fgt.

C. The diagnose output does not correspond to a device configured with the SD-WAN template shown in the exhibit.

D. The diagnose output shows that the HUB1-VPN3 member is dead.

正確答案: A

說明：（僅 VCESoft 成員可見）

最新的Fortinet NSE 7 - FortiSASE 26 Architect - NSE7_SSE_AR-26免費考試真題

最新更新

站內鏈接

聯系我們