NSE7_SDW-7.0 試験問題を無料オンラインアクセス

Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)

• A.update-source
• B.set-route-tag
• C.link-down-failover
• D.holdtime-timer

Refer to the exhibits.

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups.
Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)

• A.The first packets from Toronto to London are routed through Hub 1 then to Hub 2.
• B.Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.
• C.Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.
• D.London generates an IKE information message that contains the Toronto public IP address.

Which components make up the secure SD-WAN solution?

• A.Application, antivirus, and URL, and SSL inspection
• B.Datacenter, branch offices, and public cloud
• C.FortiGate, FortiManager, FortiAnalyzer, and FortiDeploy
• D.Telephone, ISDN, and telecom network.

Which are two benefits of using CLI templates in FortiManager? (Choose two.)

• A.You can configure FortiManager to sync local configuration changes made on the managed device, to the CLI template.
• B.You can reference meta fields.
• C.You can configure advanced CLI settings.
• D.You can configure interfaces as SD-WAN members without having to remove references first.

Refer to the exhibits.
Exhibit A -

Exhibit B -

Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B shows the system global and system settings configuration on dc1_fgt.
When branch1_client establishes a connection to dc1_host, the administrator observes that, on dc1_fgt, the reply traffic is routed over T_INET_0_0, even though T_INET_1_0 is the preferred member in the matching SD-WAN rule.
Based on the information shown in the exhibits, what configuration change must be made on dc1_fgt so dc1_fgt routes the reply traffic over T_INET_1_0?

• A.Enable snat-route-change under config system global.
• B.Disable allow-subnet-overlap under config system settings.
• C.Enable auxiliary-session under config system settings.
• D.Disable tcp-session-without-syn under config system settings.