Winter Sale - Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: dpm65

Hot Vendors
  1. Home
  2. Fortinet
  3. NSE 7 Network Security Architect
  4. NSE7_SDW-6.4
  5. Fortinet NSE 7 - SD-WAN 6.4.5 Questions and Answers
Note! The NSE7_SDW-6.4 Exam is no longer available. Get in touch with our Live Chat or email us for more information about the NSE7_SDW-7.0 Exam.

NSE7_SDW-6.4 Fortinet NSE 7 - SD-WAN 6.4.5 Questions and Answers

Questions 4

Refer to the exhibits.

NSE7_SDW-6.4 Question 4

NSE7_SDW-6.4 Question 4

ExhibitA shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.

Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

Options:

A.

port2 is referenced in a static route.

B.

port1 is assigned a manual IP address.

C.

port1 and port2 are not administratively down.

D.

port1 is referenced in a firewall policy.

Buy Now
Questions 5

Refer to exhibits.

Exhibit A.

NSE7_SDW-6.4 Question 5

Exhibit B.

NSE7_SDW-6.4 Question 5

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SO-WAN interface and the static routes configuration.

Port1 and port2 are member interfaces of the SD-WAN, and port2 becomes a dead member after reaching the failure thresholds

Which statement about the dead member is correct?

Options:

A.

Subnets 100 .64.1.0/23 and 172 . 20 . 0. 0/16 are reachable only through port1

B.

SD-WAN interface becomes disabled and port1 becomes the WAN interface

C.

Dead members require manual administrator access to bring them back alive

D.

Port2 might become alive when a single response is received from an SLA server

Buy Now
Questions 6

Refer to exhibits.

Exhibit A.

NSE7_SDW-6.4 Question 6

Exhibit B.

NSE7_SDW-6.4 Question 6

Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy

FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits.

To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?

Options:

A.

The shaper mode must be applied per-IP shaper on the traffic shaping policy

B.

The application control profile must be enabled on the firewall policy.

C.

The web filter profile must be enabled on the firewall policy

D.

The URL category must be specified on the traffic shaping policy

Buy Now
Questions 7

Which diagnostic command can you use to show interface-specific SLA logs for the last 10 minutes?

Options:

A.

diagnose sys sdwan log

B.

diagnose sys sdwan health-check

C.

diagnose sys sdwan intf-sla-log

D.

diagnose sys sdwan sla-log

Buy Now
Questions 8

Which statement is correct about SD-WAN and ADVPN?

Options:

A.

You must use OSPF.

B.

SD-WAN can steer traffic to ADVPN shortcuts established over IPsec overlays configured as SD-WAN members.

C.

Routes for ADVPN shortcuts must be manually configured.

D.

SD-WAN does not monitor the health and performance of ADVPN shortcuts.

Buy Now
Questions 9

Refer to exhibits.

NSE7_SDW-6.4 Question 9

NSE7_SDW-6.4 Question 9

Exhibit A shows the performance SLA exhibit B shows the SD-WAN diagnostics output.

Based on the exhibits, which statement is correct?

Options:

A.

Both SD-WAN member interfaces have used separate SLA targets.

B.

The SLA state of port1 is dead after five unanswered requests by the SLA servers.

C.

Port1 became dead 1ecause no traffic was offload through the egress of port1.

D.

SD-WAN member interfaces are affected by the SLA state of the inactive interface

Buy Now
Questions 10

Refer to exhibits

NSE7_SDW-6.4 Question 10

NSE7_SDW-6.4 Question 10

Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate

Based on the FortiGate configuration shown in the exhibits, what are two issues you might encounter when creating an SD-WAN interface on port1 and port2? {Choose two )

Options:

A.

Member interfaces that are administratively down

B.

Member interface that have IP address of 0.0.0.0/0.0.0.0

C.

Member interfaces that are physical interfaces as well as VLAN aggregate, and iPsec interfaces

D.

Member interfaces that are referenced by any other configuration element

Buy Now
Questions 11

Refer to Exhibit:

NSE7_SDW-6.4 Question 11

Based on the exhibit, which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules, among the member interfaces?

Options:

A.

All traffic from a source IP to a destination IP Is sent to the same interface.

B.

All traffic from a source IP Is sent to the most used Interface.

C.

All traffic from a source IP to a destination IP is sent to the least used interface.

D.

All traffic from a source IP is sent to the same interfaces.

Buy Now
Questions 12

Refer to the exhibit.

NSE7_SDW-6.4 Question 12

Which statement about the trace evaluation by FortiGate is true?

Options:

A.

Packets exceeding the configured maximum concurrent connection limit are denied by the per-IP shaper.

B.

The packet exceeded the configured bandwidth and was dropped based on the priority configuration.

C.

The packet exceeded the configured maximum bandwidth and was dropped by the shared shaper.

D.

Packets exceeding the configured concurrent connection limit are dropped based on the priority

configuration.

Buy Now
Exam Code: NSE7_SDW-6.4
Exam Name: Fortinet NSE 7 - SD-WAN 6.4.5
Last Update: Dec 2, 2023
Questions: 80
dumpsmate guaranteed to pass
24/7 Customer Support

DumpsMate's team of experts is always available to respond your queries on exam preparation. Get professional answers on any topic of the certification syllabus. Our experts will thoroughly satisfy you.

Site Secure

mcafee secure

TESTED 21 Nov 2024