View NSE7_SDW-6.4 Exam Question Dumps With Latest Demo [Feb 22, 2023]
Free NSE7_SDW-6.4 Test Questions Real Practice Test Questions
NEW QUESTION 33
What is the lnkmtd process responsible for?
- A. Monitoring links for any bandwidth saturation
- B. Logging interface quality information
- C. Flushing route tags addresses
- D. Processing performance SLA probes
Answer: B
NEW QUESTION 34
Refer to the exhibit.
Based on the output, which two statements are true? (Choose two )
- A. The all_rules rule is the implicit SD-WAN rule in place
- B. The diagnostic output presents only of the policy routes
- C. At least one policy route is implemented and in effect
- D. There is more than one SD-WAN rule configured
Answer: B,D
NEW QUESTION 35
Refer to the exhibit.
Based on the exhibit, which status description is correct?
- A. Port1 is dead because it does not meet the SLA target.
- B. Traffic matching the SD-WAN rule is steered through port2.
- C. Port2 is alive because its packet loss is lower than 10%.
- D. The SD-WAN members are monitored by different performance SLAs.
Answer: B
NEW QUESTION 36
Refer to the exhibit.
Which two statements about the debug output are correct? (Choose two )
- A. This traffic shaper drops traffic that exceeds the set limits.
- B. Traffic being controlled by the traffic shaper is under 1 Kbps.
- C. FortiGate provides statistics and reading based on historical traffic logs.
- D. The debug output shows per-IP shaper values and real-time readings.
Answer: A,D
NEW QUESTION 37
Refer to exhibits.
Exhibit A.
Exhibit B.
Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?
- A. Check interval is the time to wait before a packet sent by a member interface considered as lost.
- B. The SLA state of port2 has exceeded three consecutive unanswered requests from the SLA server.
- C. The dead member interface stays unavailable until an administrator manually brings the interface back.
- D. Port2 needs to wait 500 milliseconds to change the status from alive to dead.
Answer: B
NEW QUESTION 38
Which three parameters are available to configure SD-WAN rules? (Choose three.)
- A. Type of physical link connection
- B. Application signatures
- C. Source and destination IP address
- D. Internet service database (ISDB) address object
- E. URL categories
Answer: A,C,D
NEW QUESTION 39
Refer to the exhibit.
FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)
- A. Use different proposals are used between the interfaces.
- B. Configure the IKE mode to be aggressive mode.
- C. Specify a unique peer ID for each dial-up VPN interface.
- D. Use unique Diffie Hellman groups on each VPN interface.
Answer: B,C
NEW QUESTION 40
Refer to the exhibit.
Which statement about the command route-tag in the SD-WAN rule is true?
- A. It tags each route and references the tag in the routing table.
- B. It ensures route tags match the SD-WAN rule based on the rule order
- C. It enables the SD-WAN rule to load balance and assign traffic with a route tag
- D. It uses route tags for a BGP community and assigns the SD-WAN rules with same tag.
Answer: B
NEW QUESTION 41
Which three parameters are available to configure SD-WAN rules? (Choose three.)
- A. URL categories
- B. Application signatures
- C. Source and destination IP address
- D. Internet service database (ISDB) address object
- E. Type of physical link connection
Answer: A,C,D
NEW QUESTION 42
Refer to the exhibit.
What must you configure to enable ADVPN?
- A. On the hub VPN, only the device needs additional phase one sett
- B. ADVPN should only be enabled on unmanaged FortiGate devices.
- C. The protected subnets should be set to address object to all (0.0 .0. o/o).
- D. Each VPN device has a unique pre-shared key configured separately on phase one
Answer: D
NEW QUESTION 43
Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two )
- A. It provides direct connectivity between all sites by creating on-demand tunnels between spokes.
- B. It dynamically assigns cost and weight between the hub and the spokes, based on the physical distance.
- C. It creates redundant tunnels between hub-and-spokes, in case failure takes place on the primary links.
D18912E1457D5D1DDCBD40AB3BF70D5D - D. It ensures that spoke-to-spoke traffic no longer needs to flow through the tunnels through the hub.
Answer: A,D
NEW QUESTION 44
Refer to the exhibit.
Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)
- A. The traffic shaper drops packets if the bandwidth is less than 2500 KBps.
- B. The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.
- C. The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.
- D. The measured bandwidth is less than 100 KBps.
Answer: B,D
NEW QUESTION 45
Refer to the exhibit.
Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?
- A. The type of traffic defined and allowed on firewall policy ID 1 is UDP.
- B. Firewall policy ID 1 has source NAT disabled.
- C. Changes have been made on firewall policy ID 1 on FortiGate.
- D. FortiGate has terminated the session after a change on policy ID 1.
Answer: C
NEW QUESTION 46
Refer to exhibits.
Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)
- A. All the existing sessions that do not use SNAT will be flushed and routed through port1.
- B. All the existing sessions will continue to use port2, and new sessions will use port1.
- C. All the existing sessions using SNAT will be flushed and routed through port1.
- D. All the existing sessions will be blocked from using port1 and port2.
Answer: B,C
NEW QUESTION 47
Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two)
- A. Internet Key Exchange (IKE)
- B. Security Association (SA)
- C. Encapsulating Security Payload (ESP)
- D. Secure Shell (SSH)
- E. Transport Layer Security (TLS)
Answer: A,C
NEW QUESTION 48
Refer to the exhibits.
Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member and the static routes configuration.
If port2 is detected dead by FortiGate, which expected behavior is correct?
- A. The SD-WAN interface becomes disabled and port1 becomes the WAN interface.
- B. Subnets 10.0.20.0/23 and 172.20.0.0/16 are reachable only through port1.
- C. Dead members require manual administrator access to bring them back alive.
- D. Port2 becomes alive after one successful probe is detected.
Answer: B
NEW QUESTION 49
Refer to Exhibit:
Which statement is correct it the responder FortiGate is using a dynamic routing protocol over the IPsec VPN interface?
- A. The phase 1 type must be changed to static for dynamic routing.
- B. add-route must be disabled to prevent FortiGate from installing VPN static routes
- C. Only dial-up connections without XAuth can be used for the dynamic routing
- D. peertype must be set to accept only one peer ID for a unique VPN interface
Answer: B
NEW QUESTION 50
Refer to the exhibit.
Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2 The administrator configured ADVPN on the dual regions topology
Which two statements are correct if a user in Toronto sends traffic to London? (Choose two )
- A. Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.
- B. London generates an IKE information message that contains the Toronto public IP address
- C. Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN
- D. The first packets from Toronto to London are routed through Hub 1 then to Hub 2.
Answer: A,C
NEW QUESTION 51
Which two statements about SD-WAN central management are true? (Choose two.)
- A. It uses templates to configure SD-WAN on managed devices.
- B. It is enabled by default.
- C. It does not allow you to monitor the status of SD-WAN members.
- D. It is enabled or disabled on a per-ADOM basis.
Answer: A,D
NEW QUESTION 52
......
View All NSE7_SDW-6.4 Actual Free Exam Questions Updated: https://www.freepdfdump.top/NSE7_SDW-6.4-valid-torrent.html
