Fortinet NSE7_SDW-7.2 問題集

質問 1：
Refer to the exhibit.

Based on the exhibit, which two actions does FortiGate perform on traffic passing through port2? (Choose two.)
A. FortiGate does not change the routing information on existing sessions that use a valid gateway, after a route change.
B. FortiGate performs routing lookups for new sessions only, after a route change.
C. FortiGate always blocks all traffic, after a route change.
D. FortiGate flushes all routing information from the session table, after a route change.
正解：A,B

質問 2：
In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )
A. An absolute SD-WAN rule was defined and matched traffic.
B. The FIB lookup resolved interface was the SD-WAN interface.
C. Traffic has matched none of the FortiGate policy routes.
D. Matched traffic failed RPF and was caught by the rule.
正解：B,C

質問 3：
Exhibit.

Which conclusion about the packet debug flow output is correct?
A. The packet size exceeded the outgoing interface MTU.
B. The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.
C. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the firewall policy, and the packet was dropped.
D. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Within IPsec tunnel templates available on FortiManager. which template will you use to configure static tunnels for a hub and spoke topology?
A. IPsec_Fortinet_Recommended
B. Static_IPsec_Recommended
C. Branch_IPsec_Recommended
D. Hub_IPsec_Recommended
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?
A. You must disable idle-timeout.
B. You must enable net-device.
C. You must set ike-version to 1.
D. You must enable auto-discovery-sender.
正解：B

質問 6：
Which two statements are true about using SD-WAN to steer local-out traffic? (Choose two.)
A. You must configure each local-out feature individually, to use SD-WAN.
B. FortiGate does not consider the source address of the packet when matching an SD-WAN rule for local- out traffic.
C. By default, FortiGate does not check if the selected member has a valid route to the destination.
D. By default, local-out traffic does not use SD-WAN.
正解：A,D

質問 7：
What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process?
(Choose two.)
A. FortiGate has obtained a configuration from the platform template in FortiGate cloud.
B. The FortiGate cloud key has not been added to the FortiGate cloud portal.
C. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager
D. A factory reset performed on FortiGate.
E. The zero-touch provisioning process has completed internally, behind FortiGate.
正解：B,E

質問 8：

Exhibit B -

Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?
A. port1 and port2 are not administratively down.
B. port2 is referenced in a static route.
C. port1 is referenced in a firewall policy.
D. port1 is assigned a manual IP address.
正解：C