Fortinet NSE7_SDW-7.0 問題集

質問 1：
What is the route-tag setting in an SD-WAN rule used for?
A. To indicate the members that can be used to route SD-WAN traffic.
B. To indicate the routes that can be used for routing SD-WAN traffic.
C. To indicate the destination of a rule based on learned BGP prefixes.
D. To indicate the routes for health check probes.
正解：C

質問 2：
Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)
A. Security Association (SA)
B. Encapsulating Security Payload (ESP)
C. Internet Key Exchange (IKE)
D. Secure Shell (SSH)
正解：B,C

質問 3：
Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?
A. Firewall policy ID 1 has source NAT disabled.
B. FortiGate has terminated the session after a change on policy ID 1.
C. Changes have been made on firewall policy ID 1 on FortiGate.
D. The type of traffic defined and allowed on firewall policy ID 1 is UDP.
正解：C

質問 4：
Refer to the exhibits.
Exhibit A -

Exhibit B -

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member status, the routing table, and the performance SLA status.
If port2 is detected dead by FortiGate, what is the expected behavior?
A. FortiGate removes all static routes for port2.
B. Port2 becomes alive after three successful probes are detected.
C. Host 8.8.8.8 is reachable through port1 and port2.
D. The administrator manually restores the static routes for port2, if port2 becomes alive.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Refer to the exhibits.
Exhibit A

Exhibit B

Exhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration.
Based on the exhibits, which two statements are correct? (Choose two.)
A. Port2 has a lower latency than port1.
B. Port2 has the highest member priority.
C. SD-WAN rule ID 1 is set to lowest cost (SLA) mode.
D. FortiGate updated the outgoing interface list on the rule so it prefers port2.
正解：A,D

質問 6：
Refer to the exhibits.

Which conclusion about the packet debug flow output is correct?
A. The packet size exceeded the outgoing interface MTU.
B. The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.
C. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the firewall policy, and the packet was dropped.
D. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Refer to the exhibit.

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2.
Which two configuration settings are required for Toronto and London spokes to establish an ADVPN shortcut? (Choose two.)
A. On the spokes, auto-discovery-receiver must be enabled on the IPsec VPN to the hub.
B. auto-discovery-forwarder must be enabled on all IPsec VPNs.
C. On the hubs, auto-discovery-sender must be enabled on the IPsec VPNs to spokes.
D. On the hubs, net-device must be enabled on all IPsec VPNs.
正解：A,C