Fortinet NSE7_SDW-7.0 問題集

質問 1：
Refer to the exhibit.

An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects the traffic to match SD-WAN rule ID 1 and be routed over T_INET_0_0. However, the traffic is routed over T_INET_1_0.
Based on the output shown in the exhibit, which two reasons can cause the observed behavior? (Choose two.)
A. T_INET_1_0 has a higher member configuration priority than T_INET_0_0.
B. T_INET_1_0 has a lower route priority value (higher priority) than T_INET_0_0.
C. The traffic matches a regular policy route configured with T_INET_1_0 as the outgoing device.
D. T_INET_0_0 does not have a valid route to the destination.
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which two interfaces are considered overlay links? (Choose two.)
A. GRE
B. LAG
C. IPsec
D. Physical
正解：A,C

質問 3：
What does enabling the exchange-interface-ip setting enable FortiGate devices to exchange?
A. The IP address of their IPsec interfaces
B. The name of their IPsec interfaces
C. The gateway address of their IPsec interfaces
D. The tunnel ID of their IPsec interfaces
正解：A

質問 4：
Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)
A. Set source 100.64.1.1.
B. Set priority 10.
C. Set load-balance-mode source-ip-ip-based.
D. Set cost 15.
正解：B,D

質問 5：
Refer to the exhibits.

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups.
Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)
A. The first packets from Toronto to London are routed through Hub 1 then to Hub 2.
B. London generates an IKE information message that contains the Toronto public IP address.
C. Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.
D. Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.
正解：A,D

質問 6：
Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?
A. Shared-policy shaping mode
B. Per-IP shaping mode
C. Interface-based shaping mode
D. Reverse-policy shaping mode
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)
A. FortiGate has obtained a configuration from the platform template in FortiGate cloud.
B. The FortiGate cloud key has not been added to the FortiGate cloud portal.
C. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager
D. A factory reset performed on FortiGate.
E. The zero-touch provisioning process has completed internally, behind FortiGate.
正解：B,E