Fortinet NSE7_SDW-6.4 問題集

質問 1：
Refer to the exhibit. Which conclusion about the packet debug flow output is correct?
A. The packet size exceeded the outgoing interface MTU.
B. The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.
C. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the firewall policy, and the packet was dropped.
D. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.
正解：D

質問 2：
Refer to the exhibit.

Which conclusion about the packet debug flow output is correct?
A. The reply traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
B. The original traffic exceeded the maximum packets per second of the outgoing interface, and the packet was dropped.
C. The original traffic exceeded the maximum bandwidth of the outgoing interface, and the packet was dropped.
D. The original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
正解：D

質問 3：
Refer to the exhibit.

Which two statements about the status of the VPN tunnel are true? <Choose two )
A. FortiGate created a single IPsec virtual interface that is shared by all clients.
B. There are separate virtual interfaces for each dial-up client.
C. VPN static routes are prevented from populating the FortiGate routing table.
D. 100.64.3.1 is one of the remote IP address that comes through index interface 1.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?
A. Per-IP shaping mode
B. Interface-based shaping mode
C. Shared policy shaping mode
D. Reverse policy shaping mode
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
When attempting to establish an IPsec tunnel to FortiGate, all remote users match the FIRST_VPN IPsec VPN. This includes remote users that want to connect to the SECOND_VPN IPsec VPN. Which two configuration changes must you make on both IPsec VPNs so that remote users can connect to their intended IPsec VPN? (Choose two.)
A. Configure a unique peer ID.
B. Configure different proposals.
C. Change the IKE mode to aggressive.
D. Configure different Diffie Hellman groups.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two)
A. Security Association (SA)
B. Encapsulating Security Payload (ESP)
C. Internet Key Exchange (IKE)
D. Secure Shell (SSH)
E. Transport Layer Security (TLS)
正解：B,C