NSE7_SDW-7.2試験無料問題集（101題）「Fortinet NSE 7

出題：1

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.

Based on the exhibit, which statement is true?

A. You can move port1 from the underlay zone to the overlay zone.

B. The corporate zone contains no member.

C. You can delete the virtual-wan-link zone because it contains no member.

D. The overlay zone contains four members.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Refer to the Exhibits:

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

A. Static routes using port2 are active in the routing table.

B. FortiGate has not received three consecutive requests from the SLA server configured for port2.

C. Port2 needs to wait 500 milliseconds to change the status from alive to dead.

D. The dead member interface stays unavailable until an administrator manually brings the interface back.

正解：A 解答を投票する

出題：3

Which two tasks are part of using central VPN management? (Choose two.)

A. You must enable VPN zones for SD-WAN deployments.

B. FortiManager installs VPN settings on both managed and external gateways.

C. You configure VPN communities to define common IPsec settings shared by all VPN gateways.

D. You can configure full mesh, star, and dial-up VPN topologies.

正解：C,D 解答を投票する

出題：4

Which type statements about the SD-WAN members are true? (Choose two.)

A. An SD-WAN member can belong to two or more SD-WAN zones.

B. Interfaces of type virtual wire pair can be used as SD-WAN members.

C. You can manually define the SD-WAN members sequence number.

D. Interfaces of type VLAN can be used as SD-WAN members.

正解：C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which diagnostic command can you use to show the SD-WAN rules, interface information, and state?

A. diagnose sys sdwan service

B. diagnose sys sdwan neighbor

C. diagnose sys sdwan route-tag-list

D. diagnose sys sdwan member

正解：D 解答を投票する

出題：6

Refer to the exhibits.

Exhibit A shows the packet duplication rule configuration, the SD-WAN zone status output, and the sniffer output on FortiGate acting as the sender. Exhibit B shows the sniffer output on a FortiGate acting as the receiver.
The administrator configured packet duplication on both FortiGate devices. The sniffer output on the sender FortiGate shows that FortiGate forwards an ICMP echo request packet over three overlays, but it only receives one reply packet through T_INET_1_0.
Based on the output shown in the exhibits, which two reasons can cause the observed behavior? (Choose two.)

A. On the receiver FortiGate,packet-de-duplicationis enabled.

B. On the sender FortiGate,duplication-max-numis set to3.

C. The ICMP echo request packets sent over T_INET_0_0 and T_MPLS_0 were dropped along the way.

D. The ICMP echo request packets received over T_INET_0_0 and T_MPLS_0 were offloaded to NPU.

正解：A,B 解答を投票する

出題：7

Refer to the exhibits.

Exhibit A shows two IPsec templates to define Branch_IPsec_1 and Branch_IPsec_2. Each template defines a VPN tunnel.
Exhibit B shows the error message that FortiManager displayed when the administrator tried to assign the second template to the FortiGate device.
Which statement best explain the cause for this issue?

A. You can assign only one IPsec template to each FortiGate device.

B. You can define only one IPsec tunnel from branch devices to HUB1.

C. You should review the branch1_fgt configuration for the already configured tunnel with the name HUB1-VPN2.

D. You can assign only one template with a tunnel of fype static to each FortiGate device

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Which diagnostic command can you use to show the configured SD-WAN zones and their assigned members?

A. diagnose sys sdwan interface

B. diagnose sys sdwan service

C. diagnose sys sdwan zone

D. diagnose sys sdwan member

正解：C 解答を投票する

出題：9

Refer to the exhibit.

The exhibit shows the BGP configuration on the hub in a hub-and-spoke topology. The administrator wants BGP to advertise prefixes from spokes to other spokes over the IPsec overlays, including additional paths.
However, when looking at the spoke routing table, the administrator does not see the prefixes from other spokes and the additional paths.
Based on the exhibit, which three settings must the administrator configure inside each BGP neighbor group so spokes can learn other spokes prefixes and their additional paths? (Choose three.)

A. Setadditional-pathtosend

B. Setadvertisement-intervalto the number of additional paths to advertise

C. Enablesoft-reconfiguration

D. Setadv-additional-pathto the number of additional paths to advertise

E. Enableroute-reflector-client

正解：A,D,E 解答を投票する

出題：10

In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

A. It provides direct connectivity between spokes by creating shortcuts.

B. It enables spokes to bypass the hub during shortcut negotiation.

C. It provides the benefits of a full-mesh topology in a hub-and-spoke network.

D. It enables spokes to establish shortcuts to third-party gateways.

正解：A,C 解答を投票する

NSE7_SDW-7.2試験無料問題集「Fortinet NSE 7 - SD-WAN 7.2 認定」