Fortinet NSE7_SDW-6.4 問題集

質問 1：
Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?
A. The SLA state of port2 has exceeded three consecutive unanswered requests from the SLA server.
B. Check interval is the time to wait before a packet sent by a member interface considered as lost.
C. Port2 needs to wait 500 milliseconds to change the status from alive to dead.
D. The dead member interface stays unavailable until an administrator manually brings the interface back.
正解：A

質問 2：
In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )
A. An absolute SD-WAN rule was defined and matched traffic.
B. The FIB lookup resolved interface was the SD-WAN interface.
C. Traffic has matched none of the FortiGate policy routes.
D. Matched traffic failed RPF and was caught by the rule.
正解：B,C

質問 3：
Which three protocols are available only on the command line to configure as performance SLA status check? (Choose three.)
A. twamp
B. icmp
C. udp-echo
D. tcp-echo
E. smtp
正解：A,C,D

質問 4：
Which statement about using BGP routes in SD-WAN is true?
A. Learned routes can be used as dynamic destinations in SD-WAN rules
B. VPN topologies must be form using only BGP dynamic routing with SD-WAN
C. Adding static routes must be enabled on all ADVPN interfaces.
D. Dynamic routing protocols can be used only with non-encrypted traffic
正解：A

質問 5：
Refer to the exhibit.

Which two statements about the debug output are true? (Choose two)
A. This traffic shaper drops traffic that exceeds the set limits.
B. Traffic being controlled by the traffic shaper is under 100 KB/s.
C. The debug output shows per-IP shaper values and real-time readings.
D. FortiGate provides statistics and reading based on historical traffic logs.
正解：A,B

質問 6：
Refer to exhibits.


Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.
The traffic shaping policy is being applied to all outbound traffic; however, inbound traffic is not being evaluated by the shaping policy.
Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?
A. In the firewall policy, select Proxy-based as Inspection Mode.
B. In the traffic shaping policy, select Assign Shaping Class ID as Action.
C. In the traffic shaping policy, enable Reverse shaper, and then select the traffic shaper to use.
D. Create a new firewall policy, and the select the SD-WAN zone as Incoming Interface.
正解：C