NSE7_SDW-6.4 Exam Questions

What are two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two.)

In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two.)

Which two statements describe how IPsec phase 1 main mode id different from aggressive mode when performing IKE negotiation? (Choose two.)

What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two.)

What statement best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

Based on the exhibits, which statement is correct?

What is the lntkml process responsible for?

Which statement reflects how BGP tags work with SD-WAN rules?

Which statement about using BGP routes in SD-WAN is true?

An administrator is troubleshooting VoIP quality issues that occur when calling external phone numbers. The SD-WAN interface on the edge FortiGate is configured with the default se...

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN interface and the static routes configuration. Port1 and port2 are member interfaces of the SD-WAN, and po...

What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two.)

Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

Which diagnostic command can you use to show the SD-WAN rules interface information and state?

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two.)

Refer to the exhibit. Based on output shown in the exhibit, which two commands can be used by SD-WAN rules? (Choose two.)

Which two statements about the debug output are correct? (Choose two.)

Exhibit A shows the performance SLA exhibit B shows the SD-WAN diagnostics output. Based on the exhibits, which statement is correct?

Which statement is correct about the SD-WAN and ADVPN?

What are two reasons make forward error correction (FEC) ideal to enable in a phase one VPN interface? (Choose two.)

An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member inter...

Refer to the exhibit. Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2. The administrator configured ADVPN on the dual reg...

Exhibit A shows the traffic shaping policy and exhibit B shows the firewall policy. FortiGate is not performing traffic shaping as expected, based on the policies shown in the exhi...

Which statement about the trace evaluation by FortiGate is true?

FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN. What two configuration changes must be made to both IPsec VPN interfaces to allow incomin...

Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?

What must you configure to enable ADVPN?

Which statement defines how a per-IP traffic shaper of 10 Mbps is applied to the entire network?

Which two parameters are available to configure SD-WAN rules? (Choose three.)

Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)

Which components make up the secure SD-WAN solution?

Which two statements about the status of the VPN tunnel are true? (Choose two.)

Refer to exhibits. Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic. Which two statements abou...

Refer to the exhibit. Which statement about the command route-tag in the SD-WAN rule is true?

Based on the exhibit, which two statements about existing sessions on FortiGate after a firewall policy change, are true? (Choose two.)

Based on the exhibit, which two statements are true? (Choose two.)

Which two statements describe how IPsec phase 1 aggressive mode is different from main mode when performing IKE negotiation? (Choose two)

Why is it effective to use SD WAN rules when configuring application control?

Based on the exhibit, which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules, among the member interfaces?

What are two reasons why it is effective to implement the internet service database (ISDB) in an SD-WAN rule? (Choose two)

Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two)

Refer to the exhibit. Which two statements about the debug output are true? (Choose two)

Refer to the exhibit. Which statement about the ADVPN device role in handling traffic is true?

Which three protocols are available only on the command line to configure as performance SLA status check? (Choose three.)

Refer to the exhibit. Which statement is correct it the responder FortiGate is using a dynamic routing protocol over the IPsec VPN interface?

Which command do you use to perform real-time troubleshooting for ADVPN on either a hub or a spoke FortiGate?

Refer to the exhibits. Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate. Based on the FortiGate config...

Based on the exhibit, which two statements about traffic passing through the SD WAN member port2 are true? (Choose two)

Refer to the exhibit. Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2.The administrator configured dynamic tunnels among...