Fortinet NSE 7 – SD-WAN 6.4 NSE7_SDW-6.4 Exam Questions – PassQuestion Free Questions To Test Online

1. Refer to exhibits.

Exhibit A.

Exhibit B.

Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.

The traffic shaping policy is being applied to all outbound traffic however inbound traffic is not being evaluated by the shaping policy

Based on the exhibit, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic’?

The reverse shaper option must be enabled and a traffic shaper must be selected

The guaranteed-10mbps option must be selected as the reverse shaper option.

A new firewall policy must be created and SD-WAN must be selected as the incoming interface.

The guaranteed-10mbps option must be selected as the per-IP shaper option

2. What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two)

It improves SD-WAN performance on the managed FortiGate devices.

It simplifies the deployment and administration of SD-WAN on managed FortiGate devices

It sends probe signals as health checks to the beacon servers on behalf of FortiGate

It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server

It acts as a policy compliance entity to review all managed FortiGate devices

3. In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two)

Traffic has matched none of the FortiGate policy routes

Matched traffic failed RPF and was caught by the rule.

An absolute SD-WAN rule was defined and matched traffic

The FIB lookup resolved interface was the SD-WAN member interface

4. Refer to the exhibit.

Which two statements about the debug output are correct? (Choose two)

FortiGate provides statistics and readings based on historical traffic logs.

This traffic shaper drops traffic that exceeds the set limits.

The debug output shows per-lP shaper values and real-time readings.

Traffic being controlled by the traffic shaper is under 1 Kbps

5. What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

Per-IP shaping mode

Reverse policy shaping mode

Interface-based shaping mode

Shared policy shaping mode

6. Which statement is correct about the SD-WAN and ADVPN?

ADVPN interface can be a member of SD-WAN interface.

Dynamic VPN is not supported as an SD-Wan interface.

Spoke support dynamic VPN as a static interface.

Hub FortiGate is limited to use ADVPN as SD-WAN member interface.

7. Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

diagnose sys virtual-wan-link health-check

diagnose sys virtual-wan-link log

diagnose sys virtual-wan-link sla-lcg

diagnose sys virtual-wan-link intf-sla-log

8. Refer to exhibits.

Exhibit A.

Exhibit B.

Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy

FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits.

To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?

The shaper mode must be applied per-IP shaper on the traffic shaping policy

The application control profile must be enabled on the firewall policy.

The web filter profile must be enabled on the firewall policy

The URL category must be specified on the traffic shaping policy

9. Refer to the exhibit.

Which statement about the command route-tag in the SD-WAN rule is true?

It enables the SD-WAN rule to load balance and assign traffic with a route tag

It tags each route and references the tag in the routing table.

It uses route tags for a BGP community and assigns the SD-WAN rules with same tag.

It ensures route tags match the SD-WAN rule based on the rule order

10. Refer to the exhibit.

What must you configure to enable ADVPN?

On the hub VPN, only the device needs additional phase one sett

ADVPN should only be enabled on unmanaged FortiGate devices.

Each VPN device has a unique pre-shared key configured separately on phase one

The protected subnets should be set to address object to all (0.0 .0. o/o).

Question 1 of 10

Fortinet NSE 7 – SD-WAN 6.4 NSE7_SDW-6.4 Exam Questions

Test Online Fortinet NSE7_SDW-6.4 Free Questions

Leave a Reply Cancel reply