Fortinet NSE7_SDW-7.0 問題集

質問 1：
Refer to the exhibits.

Which conclusion about the packet debug flow output is correct?
A. The packet size exceeded the outgoing interface MTU.
B. The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.
C. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the firewall policy, and the packet was dropped.
D. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )
A. An absolute SD-WAN rule was defined and matched traffic.
B. The FIB lookup resolved interface was the SD-WAN interface.
C. Traffic has matched none of the FortiGate policy routes.
D. Matched traffic failed RPF and was caught by the rule.
正解：B,C

質問 3：
What does enabling the exchange-interface-ip setting enable FortiGate devices to exchange?
A. The IP address of their IPsec interfaces
B. The name of their IPsec interfaces
C. The gateway address of their IPsec interfaces
D. The tunnel ID of their IPsec interfaces
正解：A

質問 4：
Refer to the exhibit.

The device exchanges routes using IBGP.
Which two statements are correct about the IBGP configuration and routing information on the device? (Choose two.)
A. additional-path is enabled.
B. You can run the get router info routing-table database command to display the additional paths.
C. Each BGP route is three hops away from the destination.
D. ibgp-multipath is disabled.
正解：A,B

質問 5：
Refer to the exhibit.

The exhibit shows the BGP configuration on the hub in a hub-and-spoke topology. The administrator wants BGP to advertise prefixes from spokes to other spokes over the IPsec overlays, including additional paths. However, when looking at the spoke routing table, the administrator does not see the prefixes from other spokes and the additional paths.
Based on the exhibit, which three settings must the administrator configure inside each BGP neighbor group so spokes can learn other spokes prefixes and their additional paths? (Choose three.)
A. Enable soft-reconfiguration
B. Set advertisement-interval to the number of additional paths to advertise
C. Enable route-reflector-client
D. Set adv-additional-path to the number of additional paths to advertise
E. Set additional-path to send
正解：C,D,E

質問 6：
What is the route-tag setting in an SD-WAN rule used for?
A. To indicate the members that can be used to route SD-WAN traffic.
B. To indicate the routes that can be used for routing SD-WAN traffic.
C. To indicate the destination of a rule based on learned BGP prefixes.
D. To indicate the routes for health check probes.
正解：C