NSE7_SDW-7.2無料問題集「Fortinet NSE 7

質問 1

Which two statements are true about using SD-WAN to steer local-out traffic? (Choose two.)

（A）By default, local-out traffic does not use SD-WAN.

（B）You must configure each local-out feature individually, to use SD-WAN.

（C）FortiGate does not consider the source address of the packet when matching an SD-WAN rule for local- out traffic.

（D）By default, FortiGate does not check if the selected member has a valid route to the destination.

正解：A、B 解答を投票する

質問 2

The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks. What are three mandatory post-run tasks that must be performed? (Choose three.)

（A）Configure SD-WAN rules.

（B）Assign a branch_id metadata variable to each branch device.

（C）Create policy packages for branch devices.

（D）Configure routing through overlay tunnels created by the SD-WAN overlay template.

（E）Assign an sdwan_id metadata variable to each device (branch and hub}.

正解：C、D、E 解答を投票する

質問 3

What are two advantages of using an IPsec recommended template to configure an IPsec tunnel in a hub-and- spoke topology? (Choose two.)

（A）IPsec recommended template guides the administrator to use Fortinet recommended settings.

（B）VPN monitor tool provides additional statistics for tunnels defined with an IPsec recommended template.

（C）FortiManager automatically installs IPsec tunnels to every spoke when they are added to the FortiManager ADOM.

（D）IPsec recommended template ensures consistent settings between phase1 and phase2

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Exhibit.

The exhibit shows VPN event logs on FortiGate. In the output shown in the exhibit, which statement is true?

（A）There is one shortcut tunnel built from master tunnel T_MPLS_0.

（B）The VPN tunnel T_MPLS_0 is a shortcut tunnel.

（C）The master tunnel T_INET_0 cannot accept the ADVPN shortcut.

（D）There are no IPsec tunnel statistics log messages for ADVPN cuts.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Refer to the exhibits.
Exhibit A -

Exhibit B -

Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B shows the system global and system settings configuration on dc1_fgt.
When branch1_client establishes a connection to dc1_host, the administrator observes that, on dc1_fgt, the reply traffic is routed over T_INET_0_0, even though T_INET_1_0 is the preferred member in the matching SD-WAN rule.
Based on the information shown in the exhibits, what configuration change must be made on dc1_fgt so dc1_fgt routes the reply traffic over T_INET_1_0?

（A）Disable allow-subnet-overlap under config system settings.

（B）Enable snat-route-change under config system global.

（C）Enable auxiliary-session under config system settings.

（D）Disable t#p-session-without-syn under config system settings.

正解：C 解答を投票する

質問 6

Which diagnostic command can you use to show the member utilization statistics measured by performance SLAs for the last 10 minutes?

（A）diagnose sys sdwan sla-log

（B）diagnose sys sdwan log

（C）diagnose ays sdwan health-check

（D）diagnose sys sdwan intf-sla-log

正解：A 解答を投票する

質問 7

Which two statements about the SD-WAN zone configuration are true? (Choose two.)

（A）An SD-WAN member can belong to two or more zones.

（B）The default zones are virtual-wan-link and SASE.

（C）Theservice-sla-tie-breaksetting enables you to configure preferred member selection based on the best route to the destination.

（D）You can delete the default zones.

正解：B、C 解答を投票する

質問 8

Refer to the exhibit.

The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate appliance that supports hardware offloading. Based on the information shown in the exhibits, which two statements about the session are true? (Choose two.)

（A）The original direction of the symmetric traffic flows from port3 to port2.

（B）The reply direction of the asymmetric traffic flows from port2 to port3.

（C）The main session cannot be offloaded to hardware.

（D）The auxiliary session can be offloaded to hardware.

正解：B、D 解答を投票する

質問 9

Refer to the exhibit.

Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules?

（A）All traffic from a source IP is sent to the most used interface.

（B）All traffic from a source IP is sent to the same interface.

（C）All traffic from a source IP to a destination IP is sent to the same interface.

（D）All traffic from a source IP to a destination IP is sent to the least used interface.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Refer to the exhibits.

Exhibit A shows two IPsec templates to define Branch_IPsec_1 and Branch_IPsec_2. Each template defines a VPN tunnel.
Exhibit B shows the error message that FortiManager displayed when the administrator tried to assign the second template to the FortiGate device.
Which statement best explain the cause for this issue?

（A）You can assign only one IPsec template to each FortiGate device.

（B）You should review the branch1_fgt configuration for the already configured tunnel with the name HUB1-VPN2.

（C）You can define only one IPsec tunnel from branch devices to HUB1.

（D）You can assign only one template with a tunnel of fype static to each FortiGate device

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NSE7_SDW-7.2 無料問題集「Fortinet NSE 7 - SD-WAN 7.2」

弊社を連絡する

関連リンク

トップ試験