[Nov-2022] NSE7_SDW-6.4 exam torrent Fortinet study guide [Q18-Q41]

4.4/5 - (5 votes)

[Nov-2022] NSE7_SDW-6.4 exam torrent Fortinet study guide

Use Valid New NSE7_SDW-6.4 Test Notes & NSE7_SDW-6.4 Valid Exam Guide

Fortinet NSE7_SDW-6.4 Exam Syllabus Topics:

Topic	Details
Topic 1	Centrally manage an SD-WAN infrastructure from FortiManager Configure basic SD-WAN setup
Topic 2	Implement a full or partially meshed redundant VPN infrastructure SD-WAN configuration
Topic 3	Central management Configure SD-WAN SLAs
Topic 4	Configure SD-WAN routing SD-WAN troubleshooting
Topic 5	Troubleshoot central management problems Troubleshoot SD-WAN

NO.18 What is the lnkmtd process responsible for?

Monitoring links for any bandwidth saturation

Processing performance SLA probes

Flushing route tags addresses

Logging interface quality information

NO.19 Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

The dead member interface stays unavailable until an administrator manually brings the interface back.

The SLA state of port2 has exceeded three consecutive unanswered requests from the SLA server.

Port2 needs to wait 500 milliseconds to change the status from alive to dead.

Check interval is the time to wait before a packet sent by a member interface considered as lost.

NO.20 In which two ways does FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning? (Choose two.)

From a FortiGuard definitions update

From the central management configuration configured in FortiDeploy

From a DHCP server configured with options 240 or 241

From another FortiGate device in the same local network

NO.21 Refer to the exhibit.

Which statement about the trace evaluation by FomGate is true?

Packets exceeding the configured maximum concurrent connection limit are denied by the per-IP shaper.

The packet exceeded the configured bandwidth and was dropped based on the priority configuration.

The packet exceeded the configured maximum bandwidth and was dropped by the shared shaper.

Packets exceeding the configured concurrent connection limit are dropped based on the priority configuration.

NO.22 Which two tasks about using central VPN management are true? (Choose two.)

You can configure full mesh, star, and dial-up VPN topologies.

FortiManager installs VPN settings on both managed and external gateways.

You configure VPN communities to define common IPsec settings shared by all VPN gateways.

You must enable VPN zones for SD-WAN deployments.

NO.23 Refer to exhibits.

Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.
Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)

The implicit rule overrides all other rules because parameters widely cover sources and destinations.

SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.

The All_Access_Rules rule load balances Vimeo application traffic among SD-WAN member interfaces.

The initial session of an application goes through a learning phase in order to apply the correct rule.

NO.24 What is the lnkmtd process responsible for?

Monitoring links for any bandwidth saturation

Processing performance SLA probes

Flushing route tags addresses

Logging interface quality information

NO.25 What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two )

Specify outgoing interface routing cost.

Configure SD-WAN rules interface preference.

Select SD-WAN balancing strategy.

Specify incoming interfaces in SD-WAN rules.

NO.26 Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two )

It creates redundant tunnels between hub-and-spokes, in case failure takes place on the primary links.
D18912E1457D5D1DDCBD40AB3BF70D5D

It dynamically assigns cost and weight between the hub and the spokes, based on the physical distance.

It ensures that spoke-to-spoke traffic no longer needs to flow through the tunnels through the hub.

It provides direct connectivity between all sites by creating on-demand tunnels between spokes.

NO.27 Refer to the exhibit.

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.

The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.

The traffic shaper drops packets if the bandwidth is less than 2500 KBps.

The measured bandwidth is less than 100 KBps.

NO.28 Which statement defines how a per-IP traffic shaper of 10 Mbps is applied to the entire network?

FortiGate allocates each IP address a maximum 10 Mbps of bandwidth.

Each IP is guaranteed a minimum 10 Mbps of bandwidth

A single user uses the allocated bandwidth divided by total number of users.

The 10 Mbps bandwidth is shared equally among the IP addresses.

NO.29 What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )

It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager

It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.

It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices

It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager

NO.30 Refer to exhibits.

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

The dead member interface stays unavailable until an administrator manually brings the interface back.

Port2 needs to wait 500 milliseconds to change the status from alive to dead.

Static routes using port2 are active in the routing table.

FortiGate has not received three consecutive requests from the SLA server configured for port2.

NO.31 Refer to the exhibit.

FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

Specify a unique peer ID for each dial-up VPN interface.

Use different proposals are used between the interfaces.

Configure the IKE mode to be aggressive mode.

Use unique Diffie Hellman groups on each VPN interface.

NO.32 Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits.
To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?

The shaper mode must be applied per-IP shaper on the traffic shaping policy

The application control profile must be enabled on the firewall policy.

The web filter profile must be enabled on the firewall policy

The URL category must be specified on the traffic shaping policy

NO.33 Which components make up the secure SD-WAN solution?

Application, antivirus, and URL, and SSL inspection

Datacenter, branch offices, and public cloud

FortiGate, FortiManager, FortiAnalyzer, and FortiDeploy

Telephone, ISDN, and telecom network.

NO.34 What is the purpose of a predefined template on the FortiAnalyzer?

It can be edited and modified as required

It specifies the report layout which contains predefined texts, charts, and macros

It specifies report settings which contains time period, device selection, and schedule

It contains predefined data to generate mock reports

NO.35 Refer to exhibits.

Exhibit B.

Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.
The traffic shaping policy is being applied to all outbound traffic however inbound traffic is not being evaluated by the shaping policy Based on the exhibit, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic’?

The reverse shaper option must be enabled and a traffic shaper must be selected

The guaranteed-10mbps option must be selected as the reverse shaper option.

A new firewall policy must be created and SD-WAN must be selected as the incoming interface.

The guaranteed-10mbps option must be selected as the per-IP shaper option

NO.36 In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

Traffic has matched none of the FortiGate policy routes.

Matched traffic failed RPF and was caught by the rule.

The FIB lookup resolved interface was the SD-WAN interface.

An absolute SD-WAN rule was defined and matched traffic.

NO.37 When attempting to establish an IPsec tunnel to FortiGate, all remote users match the FIRST_VPN IPsec VPN. This includes remote users that want to connect to the SECOND_VPN IPsec VPN. Which two configuration changes must you make on both IPsec VPNs so that remote users can connect to their intended IPsec VPN? (Choose two.)

Configure different proposals.

Configure a unique peer ID.

Configure different Diffie Hellman groups.

Change the IKE mode to aggressive.

NO.38 Refer to the exhibit.

What must you configure to enable ADVPN?

On the hub VPN, only the device needs additional phase one sett

ADVPN should only be enabled on unmanaged FortiGate devices.

Each VPN device has a unique pre-shared key configured separately on phase one

The protected subnets should be set to address object to all (0.0 .0. 0/0).

NO.39 What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two.)

It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.

It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices.

It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager.

It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager.

NO.40 Refer to the exhibit.

Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

FortiGate creates separate virtual interfaces for each dial-up client.

FortiGate creates a single IPsec virtual interface that is shared by all clients.

FortiGate maps the remote gateway 100.64.3.1 to tunnel index interface 1.

FortiGate does not install IPsec static routes for remote protected networks in the routing table.

NO.41 Refer to the exhibit.
Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2 The administrator configured ADVPN on the dual regions topology

Which two statements are correct if a user in Toronto sends traffic to London? (Choose two )