Fortinet NSE7_SDW-6.4 問題集

質問 1：
Which diagnostic command can you use to show the SD-WAN rules interface information and state?
A. diagnose sys sdwan neighbor.
B. diagnose sys sdwan service.
C. diagnose sys sdwan member.
D. diagnose sys sdwan route-tag-list.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which feature enables SD-WAN to combine IPsec VPN dynamic shortcut tunnels between spokes and a static tunnel to the hub?
A. SSLVPN
B. GRE
C. ADVPN
D. OCVPN
正解：C

質問 3：
Which two tasks about using central VPN management are true? (Choose two.)
A. You configure VPN communities to define common IPsec settings shared by all VPN gateways.
B. You can configure full mesh, star, and dial-up VPN topologies.
C. You must enable VPN zones for SD-WAN deployments.
D. FortiManager installs VPN settings on both managed and external gateways.
正解：A,B

質問 4：
Refer to Exhibit:

Which statement is correct it the responder FortiGate is using a dynamic routing protocol over the IPsec VPN interface?
A. Only dial-up connections without XAuth can be used for the dynamic routing
B. peertype must be set to accept only one peer ID for a unique VPN interface
C. The phase 1 type must be changed to static for dynamic routing.
D. add-route must be disabled to prevent FortiGate from installing VPN static routes
正解：D

質問 5：
Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits.
To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?
A. The URL category must be specified on the traffic shaping policy
B. The application control profile must be enabled on the firewall policy.
C. The web filter profile must be enabled on the firewall policy
D. The shaper mode must be applied per-IP shaper on the traffic shaping policy
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )
A. An absolute SD-WAN rule was defined and matched traffic.
B. The FIB lookup resolved interface was the SD-WAN interface.
C. Traffic has matched none of the FortiGate policy routes.
D. Matched traffic failed RPF and was caught by the rule.
正解：B,C