Fortinet NSE 7 - SD-WAN 6.4 - NSE7_SDW-6.4 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Refer to the exhibits.

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member and the static routes configuration.
If port2 is detected dead by FortiGate, which expected behavior is correct?

A. Port2 becomes alive after one successful probe is detected. B. Subnets 10.0.20.0/23 and 172.20.0.0/16 are reachable only through port1. C. The SD-WAN interface becomes disabled and port1 becomes the WAN interface. D. Dead members require manual administrator access to bring them back alive.

Discussion 0

Correct Answer: B Vote an answer

Question 2

What is the lnkmtd process responsible for?

A. Logging interface quality information B. Flushing route tags addresses C. Processing performance SLA probes D. Monitoring links for any bandwidth saturation

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Refer to Exhibit:

Based on the exhibit, which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules, among the member interfaces?

A. All traffic from a source IP is sent to the same interfaces. B. All traffic from a source IP to a destination IP Is sent to the same interface. C. All traffic from a source IP to a destination IP is sent to the least used interface. D. All traffic from a source IP Is sent to the most used Interface.

Discussion 0

Correct Answer: B Vote an answer

Question 4

Which two benefits from using forward error correction (FEC) in IPsec VPNs are true? (Choose two.)

A. FEC transmits the original payload in full to recover the error in transmission. B. FEC improves reliability, which overcomes adverse WAN conditions such as noisy links. C. FEC transmits additional packets as redundant data to the remote device. D. FEC reduces the stress on the remote device buffer to reconstruct packet loss.

Discussion 0

Correct Answer: B,C Vote an answer

Question 5

Which diagnostic command can you use to show the SD-WAN rules interface information and state?

A. diagnose sys virtual-wan-link route-tag-list B. diagnose sys virtual-wan-link service C. diagnose sys virtual-wan-link member. D. diagnose sys virtual-wan-link neighbor.

Discussion 0

Correct Answer: B Vote an answer

Question 6

What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )

A. It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager. B. It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager. C. It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager. D. It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Refer to exhibits.

Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)

A. All the existing sessions will continue to use port2, and new sessions will use port1. B. All the existing sessions that do not use SNAT will be flushed and routed through port1. C. All the existing sessions using SNAT will be flushed and routed through port1. D. All the existing sessions will be blocked from using port1 and port2.

Discussion 0

Correct Answer: B,C Vote an answer

Question 8

Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

A. Check interval is the time to wait before a packet sent by a member interface considered as lost. B. The SLA state of port2 has exceeded three consecutive unanswered requests from the SLA server. C. The dead member interface stays unavailable until an administrator manually brings the interface back. D. Port2 needs to wait 500 milliseconds to change the status from alive to dead.

Discussion 0

Correct Answer: B Vote an answer

Question 9

Which two reasons make forward error correction (FEC) ideal to enable in a phase one VPN interface? (Choose two )

A. FEC improves reliability which overcomes adverse WAN conditions such as noisy links. B. FEC reduces the stress on the remote device jitter buffer to reconstruct packet loss C. FEC transmits the original payload in full to recover the error in transmission. D. FEC is useful to increase speed at which traffic is routed through IPsec tunnels. E. FEC transmits additional packets as redundant data to the remote device.

Discussion 0

Correct Answer: A,E Vote an answer