Fortinet NSE7_SDW-7.0 問題集

質問 1：
Which diagnostic command can you use to show the configured SD-WAN zones and their assigned members?
A. diagnose sys sdwan zone
B. diagnose sys sdwan member
C. diagnose sys sdwan service
D. diagnose sys sdwan interface
正解：A

質問 2：
Refer to the exhibit.

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2.
Which two configuration settings are required for Toronto and London spokes to establish an ADVPN shortcut? (Choose two.)
A. On the spokes, auto-discovery-receiver must be enabled on the IPsec VPN to the hub.
B. auto-discovery-forwarder must be enabled on all IPsec VPNs.
C. On the hubs, auto-discovery-sender must be enabled on the IPsec VPNs to spokes.
D. On the hubs, net-device must be enabled on all IPsec VPNs.
正解：A,C

質問 3：
Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?
A. You must disable idle-timeout.
B. You must enable net-device.
C. You must set ike-version to 1.
D. You must enable auto-discovery-sender.
正解：B

質問 4：
Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)
A. holdtime-timer
B. set-route-tag
C. link-down-failover
D. update-source
正解：A,C

質問 5：
Refer to the exhibits.

Exhibit A shows the packet duplication rule configuration, the SD-WAN zone status output, and the sniffer output on FortiGate acting as the sender. Exhibit B shows the sniffer output on a FortiGate acting as the receiver.
The administrator configured packet duplication on both FortiGate devices. The sniffer output on the sender FortiGate shows that FortiGate forwards an ICMP echo request packet over three overlays, but it only receives one reply packet through T_INET_1_0.
Based on the output shown in the exhibits, which two reasons can cause the observed behavior? (Choose two.)
A. The ICMP echo request packets received over T_INET_0_0 and T_MPLS_0 were offloaded to NPU.
B. The ICMP echo request packets sent over T_INET_0_0 and T_MPLS_0 were dropped along the way.
C. On the receiver FortiGate, packet-de-duplication is enabled.
D. On the sender FortiGate, duplication-max-num is set to 3.
正解：C,D

質問 6：
Which two statements about the SD-WAN zone configuration are true? (Choose two.)
A. The service-sla-tie-break setting enables you to configure preferred member selection based on the best route to the destination.
B. The default zones are virtual-wan-link and SASE.
C. You can delete the default zones.
D. An SD-WAN member can belong to two or more zones.
正解：A,B

質問 7：
Refer to the exhibits.

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)
A. The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.
B. The traffic shaper drops packets if the bandwidth is less than 2500 KBps.
C. The measured bandwidth is less than 100 KBps.
D. The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.
正解：A,C