NSE7_SDW-7.0試験無料問題集（70題）「Fortinet NSE 7

出題：1

Which diagnostic command can you use to show the configured SD-WAN zones and their assigned members?

A. diagnose sys sdwan interface

B. diagnose sys sdwan service

C. diagnose sys sdwan zone

D. diagnose sys sdwan member

正解：C 解答を投票する

出題：2

Which statement about using BGP for ADVPN is true?

A. You must configure AS path prepending.

B. You must use BGP to route traffic for both overlay and underlay links.

C. You must configure BGP communities.

D. IBGP is preferred over EBGP, because IBGP preserves next hop information.

正解：D 解答を投票する

出題：3

What is a benefit of using application steering in SD-WAN?

A. You do not need to configure firewall policies that accept the SD-WAN traffic.

B. You do not need to enable SSL inspection.

C. You steer traffic based on the detected application.

D. The traffic always skips the regular policy routes.

正解：C 解答を投票する

出題：4

Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows the source NAT (SNAT) global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two actions does FortiGate perform on existing sessions established over port2, if the administrator increases the static route priority on port2 to 20? (Choose two.)

A. FortiGate continues routing the sessions with no SNAT, over port2.

B. FortiGate performs a route lookup for the original traffic only.

C. FortiGate flags the sessions as dirty.

D. FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.

正解：C,D 解答を投票する

出題：5

Refer to the exhibit.

Based on the exhibit, which two statements are correct about the health of the selected members? (Choose two.)

A. During passive monitoring, FortiGate can't detect dead members.

B. FortiGate can offload the traffic that is subject to passive monitoring to hardware.

C. After FortiGate switches to active mode, FortiGate never fails back to passive monitoring.

D. FortiGate passively monitors the member if TCP traffic is passing through the member.

正解：A,D 解答を投票する

出題：6

Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration.
Based on the exhibits, which two statements are correct? (Choose two.)

A. Port2 has a lower latency than port1.

B. FortiGate updated the outgoing interface list on the rule so it prefers port2.

C. SD-WAN rule ID 1 is set to lowest cost (SLA) mode.

D. Port2 has the highest member priority.

正解：A,B 解答を投票する

出題：7

Refer to the exhibit.

Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)

A. FortiGate does not change existing sessions.

B. FortiGate terminates the old sessions.

C. FortiGate evaluates new sessions.

D. FortiGate flushes all sessions.

正解：A,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE7_SDW-7.0試験無料問題集「Fortinet NSE 7 - SD-WAN 7.0 認定」