最新（2023)Fortinet NSE7_SDW-7.0試験問題集 [Q31-Q49]

Share

最新（2023)Fortinet NSE7_SDW-7.0試験問題集

最適な練習法にはFortinet NSE7_SDW-7.0試験の素晴らしいNSE7_SDW-7.0試験問題PDF


Fortinet NSE7_SDW-7.0試験は、SD-WAN技術を扱うITプロフェッショナルにとって重要な認定です。この試験は、Fortinetの製品とサービスに関連するトピックをカバーし、候補者の知識とスキルをテストするように設計されています。この認定は、ITプロフェッショナルが自分の専門知識を示し、キャリアの見通しを向上させるのに役立ちます。

 

質問 # 31
Refer to the exhibit.

Which conclusion about the packet debug flow output is correct?

  • A. The original traffic exceeded the maximum packets per second of the outgoing interface, and the packet was dropped.
  • B. The original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
  • C. The original traffic exceeded the maximum bandwidth of the outgoing interface, and the packet was dropped.
  • D. The reply traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.

正解：B


質問 # 32
Refer to the exhibit.

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2.
Which two configuration settings are required for Toronto and London spokes to establish an ADVPN shortcut? (Choose two.)

  • A. auto-discovery-forwarder must be enabled on all IPsec VPNs.
  • B. On the hubs, net-device must be enabled on all IPsec VPNs.
  • C. On the spokes, auto-discovery-receiver must be enabled on the IPsec VPN to the hub.
  • D. On the hubs, auto-discovery-sender must be enabled on the IPsec VPNs to spokes.

正解：C、D


質問 # 33

Exhibit B -

Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

  • A. port1 is assigned a manual IP address.
  • B. port2 is referenced in a static route.
  • C. port1 is referenced in a firewall policy.
  • D. port1 and port2 are not administratively down.

正解：C


質問 # 34
Which two statements about SD-WAN central management are true? (Choose two.)

  • A. The objects are saved in the ADOM common object database.
  • B. It does not support meta fields.
  • C. It supports normalized interfaces for SD-WAN member configuration.
  • D. It uses templates to configure SD-WAN on managed devices.

正解：A、D

解説：
Normalized interfaces are not supported for SD-WAN templates. You can create multiple SD-WAN zones and add interface members to the SD-WAN zones. You must bind the interface members by name to physical interfaces or VPN interfaces.https://docs.fortinet.com/document/fortigate/7.0.0/sd-wan-new-features/794804/new-sd-wan-template-fmg


質問 # 35
Refer to the exhibits.
Exhibit A -

Exhibit B -

Exhibit A shows the traffic shaping policy and exhibit B shows the firewall policy.
The administrator wants FortiGate to limit the bandwidth used by YouTube. When testing, the administrator determines that FortiGate does not apply traffic shaping on YouTube traffic.
Based on the policies shown in the exhibits, what configuration change must be made so FortiGate performs traffic shaping on YouTube traffic?

  • A. Destination internet service must be enabled on the traffic shaping policy.
  • B. Web filtering must be enabled on the firewall policy.
  • C. Application control must be enabled on the firewall policy.
  • D. Individual SD-WAN members must be selected as the outgoing interface on the traffic shaping policy.

正解：C


質問 # 36
Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration.
Based on the exhibits, which two statements are correct? (Choose two.)

  • A. Port2 has a lower latency than port1.
  • B. Port2 has the highest member priority.
  • C. SD-WAN rule ID 1 is set to lowest cost (SLA) mode.
  • D. FortiGate updated the outgoing interface list on the rule so it prefers port2.

正解：A、D


質問 # 37
Refer to the exhibit.

Which statement about the role of the ADVPN device in handling traffic is true?

  • A. Two hubs, 10.0.1.101 and 10.0.2.101, are receiving and forwarding queries between each other.
  • B. This is a spoke that has received a query from a remote hub and has forwarded the response to its hub.
  • C. Two spokes, 192.2.0.1 and 10.0.2.101, forward their queries to their hubs.
  • D. This is a hub that has received a query from a spoke and has forwarded it to another spoke.

正解：D


質問 # 38
Which are two benefits of using CLI templates in FortiManager? (Choose two.)

  • A. You can configure advanced CLI settings.
  • B. You can reference meta fields.
  • C. You can configure interfaces as SD-WAN members without having to remove references first.
  • D. You can configure FortiManager to sync local configuration changes made on the managed device, to the CLI template.

正解：A、B


質問 # 39
Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows the source NAT (SNAT) global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two actions does FortiGate perform on existing sessions established over port2, if the administrator increases the static route priority on port2 to 20? (Choose two.)

  • A. FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.
  • B. FortiGate flags the sessions as dirty.
  • C. FortiGate continues routing the sessions with no SNAT, over port2.
  • D. FortiGate performs a route lookup for the original traffic only.

正解：A、B


質問 # 40
Refer to the exhibit.

Based on the output, which two conclusions are true? (Choose two.)

  • A. The SD-WAN rules take precedence over regular policy routes.
  • B. Entry 1(id=1) is a regular policy route.
  • C. There is more than one SD-WAN rule configured.
  • D. The all_rules rule represents the implicit SD-WAN rule.

正解：B、C


質問 # 41
What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process?
(Choose two.)

  • A. The FortiGate cloud key has not been added to the FortiGate cloud portal.
  • B. The zero-touch provisioning process has completed internally, behind FortiGate.
  • C. A factory reset performed on FortiGate.
  • D. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager
  • E. FortiGate has obtained a configuration from the platform template in FortiGate cloud.

正解：A、B


質問 # 42
What are two common use cases for remote internet access (RIA)? (Choose two.)

  • A. Centralize security inspection on the hub
  • B. Provide internet access through the hub
  • C. Provide direct internet access on spokes
  • D. Provide thorough inspection on spokes

正解：A、B


質問 # 43
Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?

  • A. You must enable net-device.
  • B. You must enable auto-discovery-sender.
  • C. You must disable idle-timeout.
  • D. You must set ike-version to 1.

正解：A


質問 # 44
What are two benefits of using the Internet service database (ISDB) in an SD-WAN rule? (Choose two.)

  • A. The ISDB requires application control to maintain signatures and perform load balancing.
  • B. The ISDB is dynamically updated and reduces administrative overhead.
  • C. The ISDB applies rules to traffic from specific sources, based on application type.
  • D. The ISDB contains the IP addresses and port ranges of well-known internet services.

正解：B、D


質問 # 45
Refer to the exhibit.

The device exchanges routes using IBGP.
Which two statements are correct about the IBGP configuration and routing information on the device?
(Choose two.)

  • A. ibgp-multipath is disabled.
  • B. additional-path is enabled.
  • C. You can run the get router info routing-table database command to display the additional paths.
  • D. Each BGP route is three hops away from the destination.

正解：B、C


質問 # 46
What are two benefits of using forward error correction (FEC) in IPsec VPNs? (Choose two.)

  • A. FEC supports hardware offloading.
  • B. FEC improves reliability of noisy links.
  • C. FEC transmits parity packets that can be used to reconstruct packet loss.
  • D. FEC can leverage multiple IPsec tunnels for parity packets transmission.

正解：B、C


質問 # 47
Refer to the exhibits.
Exhibit A -

Exhibit B -

Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B shows the system global and system settings configuration on dc1_fgt.
When branch1_client establishes a connection to dc1_host, the administrator observes that, on dc1_fgt, the reply traffic is routed over T_INET_0_0, even though T_INET_1_0 is the preferredmember in the matching SD-WAN rule.
Based on the information shown in the exhibits, what configuration change must be made on dc1_fgt so dc1_fgt routes the reply traffic over T_INET_1_0?

  • A. Disable tp-session-without-syn under config system settings.
  • B. Enable auxiliary-session under config system settings.
  • C. Enable snat-route-change under config system global.
  • D. Disable allow-subnet-overlap under config system settings.

正解：B

解説：
Explanation
Controlling return path with auxiliary session When multiple incoming or outgoing interfaces are used in ECMP or for load balancing, changes to routing, incoming, or return traffic interfaces impacts how an existing sessions handles the traffic. Auxiliary sessions can be used to handle these changes to traffic patterns.https://docs.fortinet.com/document/fortigate/7.0.11/administration-guide/14295/controlling-return-path-


質問 # 48
What is a benefit of using application steering in SD-WAN?

  • A. You do not need to enable SSL inspection.
  • B. You steer traffic based on the detected application.
  • C. The traffic always skips the regular policy routes.
  • D. You do not need to configure firewall policies that accept the SD-WAN traffic.

正解：B


質問 # 49
......


Fortinet NSE7_SDW-7.0認定を獲得するには、候補者は、複数選択の質問と実践的な演習で構成される厳格な試験に合格する必要があります。この試験では、SD-WANソリューションを設計、展開、管理する候補者の能力、および最新の業界動向とベストプラクティスの理解を測定します。

 

更新された検証済みの合格させるNSE7_SDW-7.0リアル試験問題と解答：https://www.goshiken.com/Fortinet/NSE7_SDW-7.0-mondaishu.html

問題集返金保証付きのNSE7_SDW-7.0問題集公式問題集：https://drive.google.com/open?id=1a9_BbpJGVkttOXK_XoDxgZGNuSLJqBjg

関するブログ

もっと
NSE7_SDW-7.0無料問題集