Fortinet NSE 7 - SD-WAN 6.4 (NSE7_SDW-6.4) Free Practice Test

Question 1

Refer to exhibits.

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

A. FortiGate has not received three consecutive requests from the SLA server configured for port2.

B. Port2 needs to wait 500 milliseconds to change the status from alive to dead.

C. Static routes using port2 are active in the routing table.

D. The dead member interface stays unavailable until an administrator manually brings the interface back.

Correct Answer: A

Question 2

Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

A. Changes have been made on firewall policy ID 1 on FortiGate.

B. FortiGate has terminated the session after a change on policy ID 1.

C. The type of traffic defined and allowed on firewall policy ID 1 is UDP.

D. Firewall policy ID 1 has source NAT disabled.

Correct Answer: A

Question 3

When attempting to establish an IPsec tunnel to FortiGate, all remote users match the FIRST_VPN IPsec VPN. This includes remote users that want to connect to the SECOND_VPN IPsec VPN. Which two configuration changes must you make on both IPsec VPNs so that remote users can connect to their intended IPsec VPN? (Choose two.)

A. Configure different Diffie Hellman groups.

B. Change the IKE mode to aggressive.

C. Configure different proposals.

D. Configure a unique peer ID.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which three protocols are available only on the command line to configure as performance SLA status check? (Choose three.)

A. tcp-echo

B. icmp

C. twamp

D. smtp

E. udp-echo

Correct Answer: A,C,E

Question 5

Refer to the exhibit

Based on the exhibit, which two statements about existing sessions on FortiGate after a firewall policy change, are true?(Choose two.)

A. Existing sessions remain unchanged after a policy change

B. The old sessions terminate after a policy change

C. All sessions are flushed by FortiGate after a policy change

D. FortiGate re-evaluates new packets after a policy change

Correct Answer: A,D

Question 6

In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

A. An absolute SD-WAN rule was defined and matched traffic.

B. The FIB lookup resolved interface was the SD-WAN interface.

C. Matched traffic failed RPF and was caught by the rule.

D. Traffic has matched none of the FortiGate policy routes.

Correct Answer: B,D

Question 7

Which action FortiGate performs on traffic that is subject to a per-IP traffic shaper of 10 Mbps?

A. FortiGate shares 10 Mbps of bandwidth equally among all source IP addresses.

B. FortiGate applies traffic shaping to the original traffic direction only.

C. FortiGate limits each source IP address to a maximum bandwidth of 10 Mbps.

D. FortiGate guarantees a minimum of 10 Mbps of bandwidth to each source IP address.

Correct Answer: C

Question 8

What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

A. Reverse policy shaping mode

B. Per-IP shaping mode

C. Shared policy shaping mode

D. Interface-based shaping mode

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet NSE 7 - SD-WAN 6.4 (NSE7_SDW-6.4) Free Practice Test