NSE7_SDW-6.4 試験問題を無料オンラインアクセス

Refer to exhibits.


Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)

• A.All the existing sessions will be blocked from using port1 and port2.
• B.All the existing sessions will continue to use port2, and new sessions will use port1.
• C.All the existing sessions using SNAT will be flushed and routed through port1.
• D.All the existing sessions that do not use SNAT will be flushed and routed through port1.

Which two tasks about using central VPN management are true? (Choose two.)

• A.You must enable VPN zones for SD-WAN deployments.
• B.FortiManager installs VPN settings on both managed and external gateways.
• C.You can configure full mesh, star, and dial-up VPN topologies.
• D.You configure VPN communities to define common IPsec settings shared by all VPN gateways.

Which statement is correct about SD-WAN and ADVPN?

• A.SD-WAN does not monitor the health and performance of ADVPN shortcuts.
• B.Routes for ADVPN shortcuts must be manually configured.
• C.SD-WAN can steer traffic to ADVPN shortcuts established over IPsec overlays configured as SD-WAN members.
• D.You must use OSPF.

Which three protocols are available only on the command line to configure as performance SLA status check? (Choose three.)

• A.twamp
• B.smtp
• C.udp-echo
• D.icmp
• E.tcp-echo

Refer to the exhibit.

Which two statements about the debug output are correct? (Choose two )

• A.Traffic being controlled by the traffic shaper is under 1 Kbps.
• B.The debug output shows per-IP shaper values and real-time readings.
• C.This traffic shaper drops traffic that exceeds the set limits.
• D.FortiGate provides statistics and reading based on historical traffic logs.