NSE7_SDW-7.2 試験問題を無料オンラインアクセス

Exhibit B -

Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

• A.port1 is assigned a manual IP address.
• B.port1 is referenced in a firewall policy.
• C.port2 is referenced in a static route.
• D.port1 and port2 are not administratively down.

Which statement about using BGP for ADVPN is true?

• A.You must configure BGP communities.
• B.You must configure AS path prepending.
• C.IBGP is preferred over EBGP, because IBGP preserves next hop information.
• D.You must use BGP to route traffic for both overlay and underlay links.

Which two statements about SD-WAN central management are true? (Choose two.)

• A.It uses templates to configure SD-WAN on managed devices.
• B.It is enabled or disabled on a per-ADOM basis.
• C.It does not allow you to monitor the status of SD-WAN members.
• D.It is enabled by default.

Refer to the exhibits.

Exhibit A shows the packet duplication rule configuration, the SD-WAN zone status output, and the sniffer output on FortiGate acting as the sender. Exhibit B shows the sniffer output on a FortiGate acting as the receiver.
The administrator configured packet duplication on both FortiGate devices. The sniffer output on the sender FortiGate shows that FortiGate forwards an ICMP echo request packet over three overlays, but it only receives one reply packet through T_INET_1_0.
Based on the output shown in the exhibits, which two reasons can cause the observed behavior? (Choose two.)

• A.On the receiver FortiGate,packet-de-duplicationis enabled.
• B.The ICMP echo request packets sent over T_INET_0_0 and T_MPLS_0 were dropped along the way.
• C.On the sender FortiGate,duplication-max-numis set to3.
• D.The ICMP echo request packets received over T_INET_0_0 and T_MPLS_0 were offloaded to NPU.

What are two advantages of using an IPsec recommended template to configure an IPsec tunnel in a hub-and- spoke topology? (Choose two.)

• A.IPsec recommended template ensures consistent settings between phase1 and phase2
• B.FortiManager automatically installs IPsec tunnels to every spoke when they are added to the FortiManager ADOM.
• C.IPsec recommended template guides the administrator to use Fortinet recommended settings.
• D.VPN monitor tool provides additional statistics for tunnels defined with an IPsec recommended template.