How Many Questions Of NSE7_SDW-6.4 Training

NEW QUESTION 1
Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

• A. The type of traffic defined and allowed on firewall policy ID 1 is UDP.
• B. FortiGate has terminated the session after a change on policy ID 1.
• C. Changes have been made on firewall policy ID 1 on FortiGate.
• D. Firewall policy ID 1 has source NAT disabled.

Answer: C

NEW QUESTION 2
Refer to the exhibit.

Which two statements about the status of the VPN tunnel are true? <Choose two )

• A. There are separate virtual interfaces for each dial-up client.
• B. VPN static routes are prevented from populating the FortiGate routing table.
• C. FortiGate created a single IPsec virtual interface that is shared by all clients.
• D. 100.64.3.1 is one of the remote IP address that comes through index interface 1.

Answer: CD

NEW QUESTION 3
What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )

• A. It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.
• B. It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices.
• C. It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager.
• D. It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager.

Answer: BD

NEW QUESTION 4
Refer to the exhibit.

Based on output shown in the exhibit, which two commands can be used by SD-WAN rules? (Choose two.)

• A. set cost 15.
• B. set source 100.64.1.1.
• C. set priority 10.
• D. set load-balance-mode source-ip-based.

Answer: CD

NEW QUESTION 5
What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

• A. The FortiGate cloud key has not been added to the FortiGate cloud portal.
• B. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager
• C. The zero-touch provisioning process has completed internally, behind FortiGate.
• D. FortiGate has obtained a configuration from the platform template in FortiGate cloud.
• E. A factory reset performed on FortiGate.

Answer: AC

NEW QUESTION 6
What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

• A. Per-IP shaping mode
• B. Reverse policy shaping mode
• C. Interface-based shaping mode
• D. Shared policy shaping mode

Answer: D

NEW QUESTION 7
Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

• A. diagnose sys virtual-wan-link health-check
• B. diagnose sys virtual-wan-link log
• C. diagnose sys virtual-wan-link sla-log
• D. diagnose sys virtual-wan-link intf-sla-log

Answer: C

NEW QUESTION 8
What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

• A. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.
• B. It improves SD-WAN performance on the managed FortiGate devices.
• C. It sends probe signals as health checks to the beacon servers on behalf of FortiGate.
• D. It acts as a policy compliance entity to review all managed FortiGate devices.
• E. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.

Answer: BD

NEW QUESTION 9
Refer to exhibits.

Exhibit B.

Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy
FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits.
To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?

• A. The shaper mode must be applied per-IP shaper on the traffic shaping policy
• B. The application control profile must be enabled on the firewall policy.
• C. The web filter profile must be enabled on the firewall policy
• D. The URL category must be specified on the traffic shaping policy

Answer: C

NEW QUESTION 10
An administrator is troubleshooting VoIP quality issues that occur when calling external phone numbers The SD-WAN interface on the edge FortiGate is configured with the default settings, and is using two upstream links One link has random jitter and latency issues and is based on a wireless connection
Which two actions must the administrator apply simultaneously on the edge FortiGate to improve VoIP quality using SD_WAN rules?

• A. Select the corresponding SD-WAN balancing strategy in the SD-WAN rule.
• B. Choose the suitable interface based on the interface cost and weight.
• C. Use the performance SLA targets to detect latency and jitter instantly.
• D. Place the troublesome link at the top of the interface preference list.
• E. Configure an SD-WAN rule to load balance all traffic without VoIP.

Answer: AC

NEW QUESTION 11
Which statement is correct about the SD-WAN and ADVPN?

• A. ADVPN interface can be a member of SD-WAN interface.
• B. Dynamic VPN is not supported as an SD-Wan interface.
• C. Spoke support dynamic VPN as a static interface.
• D. Hub FortiGate is limited to use ADVPN as SD-WAN member interface.

Answer: A

NEW QUESTION 12
......