Updated Dec 28, 2021 Verified Pass NSE7_SDW-6.4 Exam in First Attempt Guaranteed
Free NSE7_SDW-6.4 Sample Questions and 100% Cover Real Exam Questions (Updated 37 Questions)
Fortinet NSE7_SDW-6.4 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
NEW QUESTION 14
In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )
- A. An absolute SD-WAN rule was defined and matched traffic.
- B. Traffic has matched none of the FortiGate policy routes.
- C. The FIB lookup resolved interface was the SD-WAN interface.
- D. Matched traffic failed RPF and was caught by the rule.
Answer: B,C
NEW QUESTION 15
An administrator is troubleshooting VoIP quality issues that occur when calling external phone numbers The SD-WAN interface on the edge FortiGate is configured with the default settings, and is using two upstream links One link has random jitter and latency issues and is based on a wireless connection Which two actions must the administrator apply simultaneously on the edge FortiGate to improve VoIP quality using SD_WAN rules?
- A. Select the corresponding SD-WAN balancing strategy in the SD-WAN rule.
- B. Use the performance SLA targets to detect latency and jitter instantly.
- C. Configure an SD-WAN rule to load balance all traffic without VoIP.
- D. Place the troublesome link at the top of the interface preference list.
- E. Choose the suitable interface based on the interface cost and weight.
Answer: A,B
NEW QUESTION 16
Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two )
- A. It creates redundant tunnels between hub-and-spokes, in case failure takes place on the primary links
- B. It ensures that spoke-to-spoke traffic no longer needs to flow through the tunnels through the hub
- C. It provides direct connectivity between all sites by creating on-demand tunnels between spokes.
- D. It dynamically assigns cost and weight between the hub and the spokes, based on the physical distance
Answer: A,B
NEW QUESTION 17
Which three parameters are available to configure SD-WAN rules? (Choose three.)
- A. Source and destination IP address
- B. Type of physical link connection
- C. URL categories
- D. Application signatures
- E. Internet service database (ISDB) address object
Answer: A,B,E
NEW QUESTION 18
Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )
- A. A total of six packets are exchanged between an initiator and a responder instead of three packets.
- B. The use of Diffie Hellman keys is limited by the responderand needs initiator acceptance
- C. XAuth is enabled as an additional level of authentication which requires a username and password
- D. A peer ID is included in the first packet from the initiator, along with suggested security policies
Answer: C
NEW QUESTION 19
Refer to exhibits.
Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.
Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)
- A. The initial session of an application goes through a learning phase in order to apply the correct rule.
- B. The implicit rule overrides all other rules because parameters widely cover sources and destinations.
- C. SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.
- D. The All_Access_Rules rule load balances Vimeo application traffic among SD-WAN member interfaces.
Answer: B,C
NEW QUESTION 20
Which components make up the secure SD-WAN solution?
- A. Telephone, ISDN, and telecom network.
- B. Application, antivirus, and URL, and SSL inspection
- C. FortiGate, FortiManager, FortiAnalyzer, and FortiDeploy
- D. Datacenter, branch offices, and public cloud
Answer: B
NEW QUESTION 21
Refer to the exhibit.
What must you configure to enable ADVPN?
- A. ADVPN should only be enabled on unmanaged FortiGate devices.
- B. The protected subnets should be set to address object to all (0.0 .0. o/o).
- C. Each VPN device has a unique pre-shared key configured separately on phase one
- D. On the hub VPN, only the device needs additional phase one sett
Answer: C
NEW QUESTION 22
Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?
- A. diagnose sys virtual-wan-link sla-log
- B. diagnose sys virtual-wan-link log
- C. diagnose sys virtual-wan-link intf-sla-log
- D. diagnose sys virtual-wan-link health-check
Answer: A
Explanation:
Explanation/Reference: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/943037/sla-logging
NEW QUESTION 23
What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two )
- A. Select SD-WAN balancing strategy.
- B. Specify incoming interfaces in SD-WAN rules.
- C. Configure SD-WAN rules interface preference.
- D. Specify outgoing interface routing cost.
Answer: C,D
NEW QUESTION 24
Which diagnostic command can you use to show the SD-WAN rules interface information and state?
- A. diagnose sys virtual-wan-link route-tag-list
- B. diagnose sys virtual-wan-link neighbor.
- C. diagnose sys virtual-wan-link member.
- D. diagnose sys virtual-wan-link service
Answer: C
NEW QUESTION 25
Which components make up the secure SD-WAN solution?
- A. Telephone, ISDN, and telecom network.
- B. Application, antivirus, and URL, and SSL inspection
- C. Datacenter, branch offices, and public cloud
- D. FortiGate, FortiManager, FortiAnalyzer, and FortiDeploy
Answer: D
NEW QUESTION 26
Refer to the exhibit.
FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)
- A. Use unique Diffie Hellman groups on each VPN interface.
- B. Configure the IKE mode to be aggressive mode.
- C. Use different proposals are used between the interfaces.
- D. Specify a unique peer ID for each dial-up VPN interface.
Answer: A,C
NEW QUESTION 27
Which statement reflects how BGP tags work with SD-WAN rules?
- A. VPN topologies are formed using only BGP dynamic routing with SD-WAN
- B. BGP tags match the SD-WAN rule based on the order that these rules were installed.
- C. Route tags are used for a BGP community and the SD-WAN rules are assigned the same tag
- D. BGP tags require that the adding of static routes be enabled on all ADVPN interfaces
Answer: B
NEW QUESTION 28
Refer to exhibits.
Exhibit A.
Exhibit B.
Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits.
To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?
- A. The web filter profile must be enabled on the firewall policy
- B. The application control profile must be enabled on the firewall policy.
- C. The URL category must be specified on the traffic shaping policy
- D. The shaper mode must be applied per-IP shaper on the traffic shaping policy
Answer: A
NEW QUESTION 29
What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)
- A. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager
- B. The zero-touch provisioning process has completed internally, behind FortiGate.
- C. A factory reset performed on FortiGate.
- D. The FortiGate cloud key has not been added to the FortiGate cloud portal.
- E. FortiGate has obtained a configuration from the platform template in FortiGate cloud.
Answer: B,D
NEW QUESTION 30
An administrator is troubleshooting VoIP quality issues that occur when calling external phone numbers. The SD-WAN interface on the edge FortiGate is configured with the default settings, and is using two upstream links. One link has random jitter and latency issues, and is based on a wireless connection.
Which two actions must the administrator apply simultaneously on the edge FortiGate to improve VoIP quality using SD-WAN rules? (Choose two.)
- A. Select the corresponding SD-WAN balancing strategy in the SD-WAN rule.
- B. Use the performance SLA targets to detect latency and jitter instantly.
- C. Configure an SD-WAN rule to load balance all traffic without VoIP.
- D. Place the troublesome link at the top of the interface preference list.
- E. Choose the suitable interface based on the interface cost and weight.
Answer: A,B
NEW QUESTION 31
......
Download Real Fortinet NSE7_SDW-6.4 Exam Dumps Test Engine Exam Questions: https://www.prepawayexam.com/Fortinet/braindumps.NSE7_SDW-6.4.ete.file.html
Verified NSE7_SDW-6.4 Dumps Q&As - NSE7_SDW-6.4 Test Engine with Correct Answers: https://drive.google.com/open?id=1geQKcAj_ijvfzr6l8e5kgXP7ny3Xqt6U