NSE7_SDW-6.4試験無料問題集（82題）「Fortinet NSE 7

出題：1

When attempting to establish an IPsec tunnel to FortiGate, all remote users match the FIRST_VPN IPsec VPN. This includes remote users that want to connect to the SECOND_VPN IPsec VPN. Which two configuration changes must you make on both IPsec VPNs so that remote users can connect to their intended IPsec VPN? (Choose two.)

A. Configure different proposals.

B. Configure a unique peer ID.

C. Change the IKE mode to aggressive.

D. Configure different Diffie Hellman groups.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

A. The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

B. A peer ID is included in the first packet from the initiator, along with suggested security policies.

C. XAuth is enabled as an additional level of authentication, which requires a username and password.

D. A total of six packets are exchanged between an initiator and a responder instead of three packets.

正解：C,D 解答を投票する

出題：3

Which three protocols are available only on the command line to configure as performance SLA status check? (Choose three.)

A. udp-echo

B. tcp-echo

C. icmp

D. smtp

E. twamp

正解：A,B,E 解答を投票する

出題：4

Refer to the exhibit.
Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2 The administrator configured ADVPN on the dual regions topology

Which two statements are correct if a user in Toronto sends traffic to London? (Choose two )

A. Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.

B. The first packets from Toronto to London are routed through Hub 1 then to Hub 2.

C. Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.

D. London generates an IKE information message that contains the Toronto public IP address.

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

A. diagnose sys virtual-wan-link log

B. diagnose sys virtual-wan-link intf-sla-log

C. diagnose sys virtual-wan-link sla-log

D. diagnose sys virtual-wan-link health-check

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Refer to the exhibit

Based on the exhibit, which two statements about existing sessions on FortiGate after a firewall policy change, are true?(Choose two.)

A. FortiGate re-evaluates new packets after a policy change

B. All sessions are flushed by FortiGate after a policy change

C. Existing sessions remain unchanged after a policy change

D. The old sessions terminate after a policy change

正解：A,C 解答を投票する

出題：7

Which components make up the secure SD-WAN solution?

A. Application, antivirus, and URL, and SSL inspection

B. Telephone, ISDN, and telecom network.

C. Datacenter, branch offices, and public cloud

D. FortiGate, FortiManager, FortiAnalyzer, and FortiDeploy

正解：D 解答を投票する

出題：8

Refer to exhibits.

Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.
Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)

A. SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.

B. The All_Access_Rules rule load balances Vimeo application traffic among SD-WAN member interfaces.

C. The initial session of an application goes through a learning phase in order to apply the correct rule.

D. The implicit rule overrides all other rules because parameters widely cover sources and destinations.

正解：A,C 解答を投票する

NSE7_SDW-6.4試験無料問題集「Fortinet NSE 7 - SD-WAN 6.4 認定」