Pass Your NSE 7 Network Security Architect NSE7_SDW-6.4 Exam on Dec 15, 2021 with 37 Questions
NSE7_SDW-6.4 Free Exam Study Guide! (Updated 37 Questions)
Fortinet NSE7_SDW-6.4 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
NEW QUESTION 14
What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )
- A. It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.
- B. It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager
- C. It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices
- D. It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager
Answer: A,D
NEW QUESTION 15
Refer to exhibits.
Exhibit A shows the performance SLA exhibit B shows the SD-WAN diagnostics output.
Based on the exhibits, which statement is correct?
- A. Port1 became dead because no traffic was offload through the egress of port1.
- B. SD-WAN member interfaces are affected by the SLA state of the inactive interface.
- C. The SLA state of port1 is dead after five unanswered requests by the SLA servers.
- D. Both SD-WAN member interfaces have used separate SLA targets.
Answer: C
NEW QUESTION 16
What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)
- A. FortiGate has obtained a configuration from the platform template in FortiGate cloud.
- B. The zero-touch provisioning process has completed internally, behind FortiGate.
- C. A factory reset performed on FortiGate.
- D. The FortiGate cloud key has not been added to the FortiGate cloud portal.
- E. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager
Answer: B,D
NEW QUESTION 17
Refer to the exhibit.
What must you configure to enable ADVPN?
- A. On the hub VPN, only the device needs additional phase one sett
- B. ADVPN should only be enabled on unmanaged FortiGate devices.
- C. Each VPN device has a unique pre-shared key configured separately on phase one
- D. The protected subnets should be set to address object to all (0.0 .0. o/o).
Answer: C
NEW QUESTION 18
Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )
- A. The use of Diffie Hellman keys is limited by the responderand needs initiator acceptance
- B. A total of six packets are exchanged between an initiator and a responder instead of three packets.
- C. XAuth is enabled as an additional level of authentication which requires a username and password
- D. A peer ID is included in the first packet from the initiator, along with suggested security policies
Answer: C
NEW QUESTION 19
Refer to the exhibit.
Which two statements about the status of the VPN tunnel are true? <Choose two )
- A. FortiGate created a single IPsec virtual interface that is shared by all clients
- B. There are separate virtual interfaces for each dial-up client
- C. 100.64.3.1 is one of the remote IP address that comes through index interlace 1.
- D. VPN static routes are prevented from populating the FortiGate routing table
Answer: B
NEW QUESTION 20
Which diagnostic command can you use to show the SD-WAN rules interface information and state?
- A. diagnose sys virtual-wan-link neighbor.
- B. diagnose sys virtual-wan-link service
- C. diagnose sys virtual-wan-link route-tag-list
- D. diagnose sys virtual-wan-link member.
Answer: A
NEW QUESTION 21
In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )
- A. An absolute SD-WAN rule was defined and matched traffic.
- B. Matched traffic failed RPF and was caught by the rule.
- C. Traffic has matched none of the FortiGate policy routes.
- D. The FIB lookup resolved interface was the SD-WAN interface.
Answer: C,D
NEW QUESTION 22
Which statement defines how a per-IP traffic shaper of 10 Mbps is applied to the entire network?
- A. Each IP is guaranteed a minimum 10 Mbps of bandwidth.
- B. FortiGate allocates each IP address a maximum 10 Mbps of bandwidth.
- C. A single user uses the allocated bandwidth divided by total number of users.
- D. The 10 Mbps bandwidth is shared equally among the IP addresses.
Answer: B
Explanation:
Explanation/Reference:
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/885253/per-ip-traffic-shaper
NEW QUESTION 23
Refer to the exhibit.
Which statement about the trace evaluation by FomGate is true?
- A. The packet exceeded the configured bandwidth and was dropped based on the priority configuration
- B. The packet exceeded the configured maximum bandwidth and was dropped by the shared shaper.
- C. Packets exceeding the configured maximum concurrent connection limit are denied by the per-IP shaper.
- D. Packets exceeding the configured concurrent connection limit are dropped based on tfte priority configuration.
Answer: D
NEW QUESTION 24
What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )
- A. It sends probe signals as health checks to the beacon servers on behalf of FortiGate.
- B. It acts as a policy compliance entity to review all managed FortiGate devices.
- C. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.
- D. It improves SD-WAN performance on the managed FortiGate devices.
- E. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.
Answer: B,D
NEW QUESTION 25
Which three parameters are available to configure SD-WAN rules? (Choose three.)
- A. Application signatures
- B. Type of physical link connection
- C. URL categories
- D. Source and destination IP address
- E. Internet service database (ISDB) address object
Answer: B,D,E
NEW QUESTION 26
What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two.)
- A. It sends probe signals as health checks to the beacon servers on behalf of FortiGate.
- B. It acts as a policy compliance entity to review all managed FortiGate devices.
- C. It improves SD-WAN performance on the managed FortiGate devices.
- D. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.
- E. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.
Answer: B,E
NEW QUESTION 27
Refer to the exhibit.
Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?
- A. Changes have been made on firewall policy ID 1 on FortiGate.
- B. Firewall policy ID 1 has source NAT disabled.
- C. The type of traffic defined and allowed on firewall policy ID 1 is UDP.
- D. FortiGate has terminated the session after a change on policy ID 1.
Answer: C
NEW QUESTION 28
Refer to exhibits.
Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)
- A. All the existing sessions using SNAT will be flushed and routed through port1.
- B. All the existing sessions that do not use SNAT will be flushed and routed through port1.
- C. All the existing sessions will continue to use port2, and new sessions will use port1.
- D. All the existing sessions will be blocked from using port1 and port2.
Answer: A,C
NEW QUESTION 29
Refer to the exhibit.
What must you configure to enable ADVPN?
- A. Each VPN device has a unique pre-shared key configured separately on phase one.
- B. On the hub VPN, only the device needs additional phase one settings.
- C. The protected subnets should be set to address object to all (0.0.0.0/0).
- D. ADVPN should only be enabled on unmanaged FortiGate devices.
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION 30
What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two )
- A. Configure SD-WAN rules interface preference.
- B. Specify incoming interfaces in SD-WAN rules.
- C. Specify outgoing interface routing cost.
- D. Select SD-WAN balancing strategy.
Answer: A
NEW QUESTION 31
What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?
- A. Shared policy shaping mode
- B. Interface-based shaping mode
- C. Reverse policy shaping mode
- D. Per-IP shaping mode
Answer: B
NEW QUESTION 32
......
NSE7_SDW-6.4 Dumps for NSE 7 Network Security Architect Certified Exam Questions & Answer: https://www.actualtestsquiz.com/NSE7_SDW-6.4-test-torrent.html
Realistic Verified NSE7_SDW-6.4 exam dumps Q&As - NSE7_SDW-6.4 Free Update : https://drive.google.com/open?id=1svCIQHAVvV95Zw6Kb789BWPFWlAct9kT
