NSE7_SDW-7.0事前に試験練習テストで使おう（最新70問題)
有効なNSE7_SDW-7.0試験解答PDF一年無料更新
質問 # 12
Refer to the exhibit.
The device exchanges routes using IBGP.
Which two statements are correct about the IBGP configuration and routing information on the device? (Choose two.)
- A. additional-path is enabled.
- B. ibgp-multipath is disabled.
- C. Each BGP route is three hops away from the destination.
- D. You can run the get router info routing-table database command to display the additional paths.
正解：A、D
質問 # 13
Refer to the exhibit.
FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)
- A. Use different proposals are used between the interfaces.
- B. Specify a unique peer ID for each dial-up VPN interface.
- C. Configure the IKE mode to be aggressive mode.
- D. Use unique Diffie Hellman groups on each VPN interface.
正解：B、C
質問 # 14
Refer to the exhibit.
The exhibit shows the SD-WAN rule status and configuration.
Based on the exhibit, which change in the measured latency will make T_MPLS_0 the new preferred member?
- A. When T_INET_0_0 has a latency of 250 ms.
- B. When T_MPLS_0 has a latency of 100 ms.
- C. When T_N1PLS_0 has a latency of 80 ms.
- D. When T_INET_0_0 and T_MPLS_0 have the same latency.
正解：C
質問 # 15
Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)
- A. Security Association (SA)
- B. Internet Key Exchange (IKE)
- C. Encapsulating Security Payload (ESP)
- D. Secure Shell (SSH)
正解：B、C
質問 # 16
What does enabling the exchange-interface-ip setting enable FortiGate devices to exchange?
- A. The IP address of their IPsec interfaces
- B. The tunnel ID of their IPsec interfaces
- C. The name of their IPsec interfaces
- D. The gateway address of their IPsec interfaces
正解：A
質問 # 17
Refer to the exhibit.
Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change?
(Choose two.)
- A. FortiGate flushes all sessions.
- B. FortiGate does not change existing sessions.
- C. FortiGate terminates the old sessions.
- D. FortiGate evaluates new sessions.
正解：B、D
解説：
Explanation
FortiGate not to flag existing impacted session as dirty by setting firewall-session-dirty to check new. The results is that FortiGate evaluates only new session against the new firewall policy.
質問 # 18
Refer to the exhibit.
An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects the traffic to match SD-WAN rule ID 1 and be routed over T_INET_0_0. However, the traffic is routed over T_INET_1_0.
Based on the output shown in the exhibit, which two reasons can cause the observed behavior? (Choose two.)
- A. T_INET_0_0 does not have a valid route to the destination.
- B. The traffic matches a regular policy route configured with T_INET_1_0 as the outgoing device.
- C. T_INET_1_0 has a higher member configuration priority than T_INET_0_0.
- D. T_INET_1_0 has a lower route priority value (higher priority) than T_INET_0_0.
正解：A、B
質問 # 19
In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)
- A. It enables spokes to establish shortcuts to third-party gateways.
- B. It provides direct connectivity between spokes by creating shortcuts.
- C. It provides the benefits of a full-mesh topology in a hub-and-spoke network.
- D. It enables spokes to bypass the hub during shortcut negotiation.
正解：B、C
質問 # 20
Which are three key routing principles in SD-WAN? (Choose three.)
- A. By default, SD-WAN members are skipped if they do not have a valid route to the destination.
- B. SD-WAN rules have precedence over ISDB routes.
- C. By default, SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.
- D. FortiGate performs route lookups for new sessions only.
- E. Regular policy routes have precedence over SD-WAN rules.
正解：A、C、E
質問 # 21
Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.
What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?
- A. You must enable net-device.
- B. You must set ike-version to 1.
- C. You must disable idle-timeout.
- D. You must enable auto-discovery-sender.
正解：A
質問 # 22
Which two statements about SLA targets and SD-WAN rules are true? (Choose two.)
- A. When configuring an SD-WAN rule, you can select multiple SLA targets of the same performance SLA.
- B. SLA targets are used only by SD-WAN rules that are configured with Lowest Cost (SLA) or Maximize Bandwidth (SLA) as strategy.
- C. Member metrics are measured only if an SLA target is configured.
- D. SD-WAN rules use SLA targets to check if the preferred members meet the SLA requirements.
正解：B、D
質問 # 23
Refer to the exhibits.
Exhibit B -
Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?
- A. port1 is referenced in a firewall policy.
- B. port1 and port2 are not administratively down.
- C. port2 is referenced in a static route.
- D. port1 is assigned a manual IP address.
正解：A
質問 # 24
Which diagnostic command can you use to show the configured SD-WAN zones and their assigned members?
- A. diagnose sys sdwan service
- B. diagnose sys sdwan interface
- C. diagnose sys sdwan member
- D. diagnose sys sdwan zone
正解：D
質問 # 25
Refer to the exhibit.
Which two SD-WAN template member settings support the use of FortiManager meta fields? (Choose two.)
- A. Gateway IP
- B. Cost
- C. Priority
- D. Interface member
正解：A、D
質問 # 26
Refer to the exhibit.
Which statement explains the output shown in the exhibit?
- A. FortiGate performed standard FIB routing on the session.
- B. FortiGate used 192.2.0.1 as the gateway for the original direction of the traffic.
- C. FortiGate will not re-evaluate the session following a firewall policy change.
- D. FortiGate must re-evaluate the session due to routing change.
正解：D
質問 # 27
What is a benefit of using application steering in SD-WAN?
- A. You steer traffic based on the detected application.
- B. You do not need to configure firewall policies that accept the SD-WAN traffic.
- C. The traffic always skips the regular policy routes.
- D. You do not need to enable SSL inspection.
正解：A
質問 # 28
Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?
- A. Shared-policy shaping mode
- B. Reverse-policy shaping mode
- C. Per-IP shaping mode
- D. Interface-based shaping mode
正解：D
解説：
Interface-based shaping goes further, enabling traffic controls based on percentage of the interface bandwidth.
質問 # 29
Refer to the exhibits.
Exhibit A
Exhibit B -
Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status.
The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule.
Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?
- A. The traffic will be routed over T_INET_0_0.
- B. The traffic will be load balanced across all three overlays.
- C. The traffic will be routed over T_INET_1_0.
- D. The traffic will be routed over T_MPLS_0.
正解：C
質問 # 30
Refer to the exhibit.
Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)
- A. Set load-balance-mode source-ip-ip-based.
- B. Set priority 10.
- C. Set source 100.64.1.1.
- D. Set cost 15.
正解：B、D
質問 # 31
Refer to the exhibit.
Based on the exhibit, which action does FortiGate take?
- A. FortiGate brings up port5 after it detects all SD-WAN members as alive.
- B. FortiGate bounces port5 after it detects all SD-WAN members as dead.
- C. FortiGate fails over to the secondary device after it detects all SD-WAN members as dead.
- D. FortiGate brings down port5 after it detects all SD-WAN members as dead.
正解：C
質問 # 32
......
Fortinet NSE 7 - SD-WAN 7.0無料更新認定サンプル問題：https://jp.fast2test.com/NSE7_SDW-7.0-premium-file.html