NSE7_SDW-6.4 無料問題集「Fortinet NSE 7 - SD-WAN 6.4」

（A）Adding static routes must be enabled on all ADVPN interfaces.

（B）Dynamic routing protocols can be used only with non-encrypted traffic

（C）VPN topologies must be form using only BGP dynamic routing with SD-WAN

（D）Learned routes can be used as dynamic destinations in SD-WAN rules

（A）The implicit rule overrides all other rules because parameters widely cover sources and destinations.

（B）The first Vimeo session may not match the Vimeo SD-WAN rule because the session is used for the application learning phase.

（C）SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.

（D）The Vimeo SD-WAN rule steers Vimeo application traffic among all SD-WAN member interfaces.

（A）The dead member interface stays unavailable until an administrator manually brings the interface back.

（B）FortiGate has not received three consecutive requests from the SLA server configured for port2.

（C）Port2 needs to wait 500 milliseconds to change the status from alive to dead.

（D）Static routes using port2 are active in the routing table.

（A）A new firewall policy must be created and SD-WAN must be selected as the incoming interface.

（B）The guaranteed-10mbps option must be selected as the per-IP shaper option

（C）The reverse shaper option must be enabled and a traffic shaper must be selected

（D）The guaranteed-10mbps option must be selected as the reverse shaper option.

（A）The number of simultaneous connections among all source IP addresses can exceed 5 connections.

（B）The number of simultaneous connections allowed for each source IP address can exceed 5 connections.

（C）The traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.

（D）The traffic shaper limits the combined bandwidth of all connections to a maximum of 5 MB/sec.

（A）The dead member interface stays unavailable until an administrator manually brings the interface back.

（B）The SLA state of port2 has exceeded three consecutive unanswered requests from the SLA server.

（C）Port2 needs to wait 500 milliseconds to change the status from alive to dead.

（D）Check interval is the time to wait before a packet sent by a member interface considered as lost.

（A）It uses route tags for a BGP community and assigns the SD-WAN rules with same tag.

（B）It ensures route tags match the SD-WAN rule based on the rule order

（C）It enables the SD-WAN rule to load balance and assign traffic with a route tag

（D）It tags each route and references the tag in the routing table.

（A）Dead members require manual administrator access to bring them back alive.

（B）Subnets 10.0.20.0/23 and 172.20.0.0/16 are reachable only through port1.

（C）The SD-WAN interface becomes disabled and port1 becomes the WAN interface.

（D）Port2 becomes alive after one successful probe is detected.