NSE7_SDW-6.4 Exam Training Practice Tests (Fortinet NSE 7

Question 1

Which three performance SLA protocols are available on the FortiGate CLI only? (Choose three.)

A. smtp B. icmp C. tcp-echo D. udp-echo E. twamp

Correct Answer: C,D,E

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

A. It sends probe signals as health checks to the beacon servers on behalf of FortiGate. B. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server. C. It improves SD-WAN performance on the managed FortiGate devices. D. It acts as a policy compliance entity to review all managed FortiGate devices. E. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.

Correct Answer: B,E

Question 3

Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

A. FortiGate has terminated the session after a change on policy ID 1. B. The type of traffic defined and allowed on firewall policy ID 1 is UDP. C. Firewall policy ID 1 has source NAT disabled. D. Changes have been made on firewall policy ID 1 on FortiGate.

Correct Answer: D

Question 4

Refer to the exhibits.

ExhibitA shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

A. port2 is referenced in a static route. B. port1 is referenced in a firewall policy. C. port1 is assigned a manual IP address. D. port1 and port2 are not administratively down.

Correct Answer: B

Question 5

Which statement reflects how BGP tags work with SD-WAN rules?

A. Route tags are used for a BGP community and the SD-WAN rules are assigned the same tag B. VPN topologies are formed using only BGP dynamic routing with SD-WAN C. BGP tags match the SD-WAN rule based on the order that these rules were installed. D. BGP tags require that the adding of static routes be enabled on all ADVPN interfaces

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Which diagnostic command can you use to show interface-specific SLA logs for the last 10 minutes?

A. diagnose sys sdwan intf-sla-log B. diagnose sys sdwan log C. diagnose sys sdwan sla-log D. diagnose sys sdwan health-check

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )

A. It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices. B. It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager. C. It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager. D. It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.

Correct Answer: B,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

Refer to exhibits.

Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.
The traffic shaping policy is being applied to all outbound traffic; however, inbound traffic is not being evaluated by the shaping policy.
Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?

A. Create a new firewall policy, and the select the SD-WAN zone as Incoming Interface. B. In the traffic shaping policy, select Assign Shaping Class ID as Action. C. In the firewall policy, select Proxy-based as Inspection Mode. D. In the traffic shaping policy, enable Reverse shaper, and then select the traffic shaper to use.

Correct Answer: D

Question 9

Refer to the exhibit.

Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

A. FortiGate creates a single IPsec virtual interface that is shared by all clients. B. FortiGate creates separate virtual interfaces for each dial-up client. C. FortiGate maps the remote gateway 100.64.3.1 to tunnel index interface 1. D. FortiGate does not install IPsec static routes for remote protected networks in the routing table.

Correct Answer: A,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Fortinet NSE 7 - SD-WAN 6.4 - NSE7_SDW-6.4 Exam Practice Test