Fortinet NSE7_SDW-7.0 問題集

質問 1：
Refer to the exhibit.

An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects the traffic to match SD-WAN rule ID 1 and be routed over T_INET_0_0. However, the traffic is routed over T_INET_1_0.
Based on the output shown in the exhibit, which two reasons can cause the observed behavior? (Choose two.)
A. T_INET_1_0 has a higher member configuration priority than T_INET_0_0.
B. T_INET_1_0 has a lower route priority value (higher priority) than T_INET_0_0.
C. The traffic matches a regular policy route configured with T_INET_1_0 as the outgoing device.
D. T_INET_0_0 does not have a valid route to the destination.
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )
A. An absolute SD-WAN rule was defined and matched traffic.
B. The FIB lookup resolved interface was the SD-WAN interface.
C. Traffic has matched none of the FortiGate policy routes.
D. Matched traffic failed RPF and was caught by the rule.
正解：B,C

質問 3：
Which two statements about the SD-WAN zone configuration are true? (Choose two.)
A. The service-sla-tie-break setting enables you to configure preferred member selection based on the best route to the destination.
B. The default zones are virtual-wan-link and SASE.
C. You can delete the default zones.
D. An SD-WAN member can belong to two or more zones.
正解：A,B

質問 4：
Refer to the exhibit.

Based on the exhibit, which action does FortiGate take?
A. FortiGate fails over to the secondary device after it detects all SD-WAN members as dead.
B. FortiGate brings up port5 after it detects all SD-WAN members as alive.
C. FortiGate bounces port5 after it detects all SD-WAN members as dead.
D. FortiGate brings down port5 after it detects all SD-WAN members as dead.
正解：A

質問 5：
Refer to the exhibit.

Based on the exhibit, which two statements are correct about the health of the selected members? (Choose two.)
A. FortiGate can offload the traffic that is subject to passive monitoring to hardware.
B. During passive monitoring, FortiGate can't detect dead members.
C. FortiGate passively monitors the member if TCP traffic is passing through the member.
D. After FortiGate switches to active mode, FortiGate never fails back to passive monitoring.
正解：B,C

質問 6：
Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?
A. Shared-policy shaping mode
B. Per-IP shaping mode
C. Interface-based shaping mode
D. Reverse-policy shaping mode
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)
A. Set source 100.64.1.1.
B. Set priority 10.
C. Set load-balance-mode source-ip-ip-based.
D. Set cost 15.
正解：B,D