Fortinet NSE7_SDW-7.0 問題集

質問 1：
Refer to the exhibit.

Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules?
A. All traffic from a source IP is sent to the most used interface.
B. All traffic from a source IP to a destination IP is sent to the least used interface.
C. All traffic from a source IP to a destination IP is sent to the same interface.
D. All traffic from a source IP is sent to the same interface.
正解：C

質問 2：
Which two performance SLA protocols enable you to verify that the server response contains a specific value? (Choose two.)
A. twamp
B. icmp
C. http
D. dns
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Refer to the exhibits.


Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)
A. FortiGate facilitated the negotiation of the T_INET_1_0_0 ADVPN shortcut over T_INET_1_0.
B. FortiGate does not install IPsec static routes for remote protected networks in the routing table.
C. Dead peer detection is disabled.
D. The phase 1 configuration supports the network-overlay setting.
正解：B,D

質問 4：
Which SD-WAN setting enables FortiGate to delay the recovery of ADVPN shortcuts?
A. link-down-failover
B. idle-timeout
C. auto-discovery-shortcuts
D. hold-down-time
正解：D

質問 5：
Refer to the exhibits.

Which conclusion about the packet debug flow output is correct?
A. The packet size exceeded the outgoing interface MTU.
B. The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.
C. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the firewall policy, and the packet was dropped.
D. The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Refer to the exhibits.
Exhibit A

Exhibit B -

Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status.
The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule.
Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?
A. The traffic will be routed over T_INET_1_0.
B. The traffic will be load balanced across all three overlays.
C. The traffic will be routed over T_MPLS_0.
D. The traffic will be routed over T_INET_0_0.
正解：A

質問 7：
Refer to the exhibits.
Exhibit A -

Exhibit B -

Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B shows the system global and system settings configuration on dc1_fgt.
When branch1_client establishes a connection to dc1_host, the administrator observes that, on dc1_fgt, the reply traffic is routed over T_INET_0_0, even though T_INET_1_0 is the preferred member in the matching SD-WAN rule.
Based on the information shown in the exhibits, what configuration change must be made on dc1_fgt so dc1_fgt routes the reply traffic over T_INET_1_0?
A. Disable allow-subnet-overlap under config system settings.
B. Enable auxiliary-session under config system settings.
C. Enable snat-route-change under config system global.
D. Disable tcp-session-without-syn under config system settings.
正解：B
解説: (Topexam メンバーにのみ表示されます)