NSE7_SDW-6.4 試験問題を無料オンラインアクセス

Which two statements about SLA targets and SD-WAN rules are true? (Choose two.)

• A.SLA targets are used only by SD-WAN rules that are configured with Lowest Cost (SLA) or Maximize Bandwidth (SLA) as strategy.
• B.Member metrics are measured only if an SLA target is configured.
• C.When configuring an SD-WAN rule, you can select multiple SLA targets of the same performance SLA.
• D.SD-WAN rules use SLA targets to check if the preferred members meet the SLA requirements.

Refer to the exhibit

Based on the exhibit, which two statements about existing sessions on FortiGate after a firewall policy change, are true?(Choose two.)

• A.The old sessions terminate after a policy change
• B.FortiGate re-evaluates new packets after a policy change
• C.Existing sessions remain unchanged after a policy change
• D.All sessions are flushed by FortiGate after a policy change

Which two benefits from using forward error correction (FEC) in IPsec VPNs are true? (Choose two.)

• A.FEC improves reliability, which overcomes adverse WAN conditions such as noisy links.
• B.FEC reduces the stress on the remote device buffer to reconstruct packet loss.
• C.FEC transmits additional packets as redundant data to the remote device.
• D.FEC transmits the original payload in full to recover the error in transmission.

Which diagnostic command can you use to show interface-specific SLA logs for the last 10 minutes?

• A.diagnose sys sdwan log
• B.diagnose sys sdwan health-check
• C.diagnose sys sdwan sla-log
• D.diagnose sys sdwan intf-sla-log

Which two statements describe how IPsec phase 1 aggressive mode is different from main mode when performing IKE negotiation? (Choose two)

• A.XAuth is enabled as an additional level of authentication, which requires a username and password.
• B.The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.
• C.A total of six packets are exchanged between an initiator and a responder instead of three packets.
• D.A peer ID is included in the first packet from the initiator, along with suggested security policies.