Fortinet NSE7_SDW-6.4 問題集

質問 1：
Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?
A. Firewall policy ID 1 has source NAT disabled.
B. FortiGate has terminated the session after a change on policy ID 1.
C. Changes have been made on firewall policy ID 1 on FortiGate.
D. The type of traffic defined and allowed on firewall policy ID 1 is UDP.
正解：C

質問 2：
Refer to exhibits.


Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.
Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)
A. The implicit rule overrides all other rules because parameters widely cover sources and destinations.
B. SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.
C. The initial session of an application goes through a learning phase in order to apply the correct rule.
D. The All_Access_Rules rule load balances Vimeo application traffic among SD-WAN member interfaces.
正解：B,C

質問 3：
Which diagnostic command can you use to show the SD-WAN rules interface information and state?
A. diagnose sys sdwan neighbor.
B. diagnose sys sdwan service.
C. diagnose sys sdwan member.
D. diagnose sys sdwan route-tag-list.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two)
A. Security Association (SA)
B. Encapsulating Security Payload (ESP)
C. Internet Key Exchange (IKE)
D. Secure Shell (SSH)
E. Transport Layer Security (TLS)
正解：B,C

質問 5：
Refer to the exhibit.

Which conclusion about the packet debug flow output is correct?
A. The reply traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
B. The original traffic exceeded the maximum packets per second of the outgoing interface, and the packet was dropped.
C. The original traffic exceeded the maximum bandwidth of the outgoing interface, and the packet was dropped.
D. The original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
正解：D

質問 6：
Which two configuration tasks are required to use SD-WAN? (Choose two.)
A. Add one or more members to an SD-WAN zone.
B. Specify the incoming interfaces in SD-WAN rules.
C. Configure at least one firewall policy for SD-WAN traffic.
D. Specify the outgoing interface routing cost.
正解：A,C