NSE7_SDW-6.4 Exam Questions
76 real NSE7_SDW-6.4 exam questions with expert-verified answers and explanations. Page 1 of 2.
- Question #1
What are two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two.)
- Question #2
In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two.)
- Question #3
Which two statements describe how IPsec phase 1 main mode id different from aggressive mode when performing IKE negotiation? (Choose two.)
- Question #4
What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two.)
- Question #5
What statement best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?
- Question #6
Based on the exhibits, which statement is correct?
- Question #7
What is the lntkml process responsible for?
- Question #8
Which statement reflects how BGP tags work with SD-WAN rules?
- Question #9
Which statement about using BGP routes in SD-WAN is true?
- Question #10
An administrator is troubleshooting VoIP quality issues that occur when calling external phone numbers. The SD-WAN interface on the edge FortiGate is configured with the default se...
- Question #11
Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN interface and the static routes configuration. Port1 and port2 are member interfaces of the SD-WAN, and po...
- Question #12
What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two.)
- Question #13
Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?
- Question #14
Which diagnostic command can you use to show the SD-WAN rules interface information and state?
- Question #15
What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)
- Question #16
Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two.)
- Question #17
Refer to the exhibit. Based on output shown in the exhibit, which two commands can be used by SD-WAN rules? (Choose two.)
- Question #18
Which two statements about the debug output are correct? (Choose two.)
- Question #19
Exhibit A shows the performance SLA exhibit B shows the SD-WAN diagnostics output. Based on the exhibits, which statement is correct?
- Question #20
Which statement is correct about the SD-WAN and ADVPN?
- Question #21
What are two reasons make forward error correction (FEC) ideal to enable in a phase one VPN interface? (Choose two.)
- Question #22
An administrator would like to create an SD-WAN default static route for a newly created SD-WAN using the FortiManager GUI. Both port1 and port2 are part of the SD-WAN member inter...
- Question #23
Refer to the exhibit. Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2. The administrator configured ADVPN on the dual reg...
- Question #24
Exhibit A shows the traffic shaping policy and exhibit B shows the firewall policy. FortiGate is not performing traffic shaping as expected, based on the policies shown in the exhi...
- Question #25
Which statement about the trace evaluation by FortiGate is true?
- Question #26
FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN. What two configuration changes must be made to both IPsec VPN interfaces to allow incomin...
- Question #27
Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?
- Question #28
What must you configure to enable ADVPN?
- Question #29
Which statement defines how a per-IP traffic shaper of 10 Mbps is applied to the entire network?
- Question #30
Which two parameters are available to configure SD-WAN rules? (Choose three.)
- Question #31
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)
- Question #32
Which components make up the secure SD-WAN solution?
- Question #33
Which two statements about the status of the VPN tunnel are true? (Choose two.)
- Question #34
Refer to exhibits. Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic. Which two statements abou...
- Question #35
Refer to the exhibit. Which statement about the command route-tag in the SD-WAN rule is true?
- Question #36
Based on the exhibit, which two statements about existing sessions on FortiGate after a firewall policy change, are true? (Choose two.)
- Question #37
Based on the exhibit, which two statements are true? (Choose two.)
- Question #38
Which two statements describe how IPsec phase 1 aggressive mode is different from main mode when performing IKE negotiation? (Choose two)
- Question #39
Why is it effective to use SD WAN rules when configuring application control?
- Question #40
Based on the exhibit, which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules, among the member interfaces?
- Question #41
What are two reasons why it is effective to implement the internet service database (ISDB) in an SD-WAN rule? (Choose two)
- Question #42
Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two)
- Question #43
Refer to the exhibit. Which two statements about the debug output are true? (Choose two)
- Question #44
Refer to the exhibit. Which statement about the ADVPN device role in handling traffic is true?
- Question #45
Which three protocols are available only on the command line to configure as performance SLA status check? (Choose three.)
- Question #46
Refer to the exhibit. Which statement is correct it the responder FortiGate is using a dynamic routing protocol over the IPsec VPN interface?
- Question #47
Which command do you use to perform real-time troubleshooting for ADVPN on either a hub or a spoke FortiGate?
- Question #48
Refer to the exhibits. Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate. Based on the FortiGate config...
- Question #49
Based on the exhibit, which two statements about traffic passing through the SD WAN member port2 are true? (Choose two)
- Question #50
Refer to the exhibit. Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2.The administrator configured dynamic tunnels among...