Question No. 1

Refer to the exhibit.

Based on the exhibit, which status description is correct?

APort1 is dead because it does not meet the SLA target.

BPort2 is alive because its packet loss is lower than 10%.

CThe SD-WAN members are monitored by different performance SLAs.

DTraffic matching the SD-WAN rule is steered through port2.

Show Answer

Correct Answer: D

Question No. 2

Refer to the exhibit.

Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

AFortiGate creates separate virtual interfaces for each dial-up client.

BFortiGate creates a single IPsec virtual interface that is shared by all clients.

CFortiGate maps the remote gateway 100.64.3.1 to tunnel index interface 1.

DFortiGate does not install IPsec static routes for remote protected networks in the routing table.

Show Answer

Correct Answer: B, C

If net-device is disabled, FortiGate creates a single IPSEC virtual interface that is shared by all IPSEC clients connecting to the same dialup VPN. In this case, the tunnel-search setting determines how FortiGate learns the network behind each remote client.

Question No. 3

Which components make up the secure SD-WAN solution?

AApplication, antivirus, and URL, and SSL inspection

BDatacenter, branch offices, and public cloud

CFortiGate, FortiManager, FortiAnalyzer, and FortiDeploy

DTelephone, ISDN, and telecom network.

Show Answer

Correct Answer: C

Question No. 4

Refer to exhibits.

Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.

Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)

AThe implicit rule overrides all other rules because parameters widely cover sources and destinations.

BSD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.

CThe All_Access_Rules rule load balances Vimeo application traffic among SD-WAN member interfaces.

DThe initial session of an application goes through a learning phase in order to apply the correct rule.

Show Answer

Correct Answer: B, D

Question No. 5

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

AThe FortiGate cloud key has not been added to the FortiGate cloud portal.

BFortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager

CThe zero-touch provisioning process has completed internally, behind FortiGate.

DFortiGate has obtained a configuration from the platform template in FortiGate cloud.

EA factory reset performed on FortiGate.

Show Answer

Correct Answer: A, C

Free Fortinet NSE7_SDW-6.4 Exam Actual Questions

The questions for NSE7_SDW-6.4 were last updated On Nov 21, 2024