Fortinet NSE7_SDW-6.4 Real Exam Questions Test Engine Dumps Training With 82 Questions [Q23-Q38] : Free valid test braindumps : http://free.validbraindumps.com

NO.23 Refer to the exhibit.

Which two statements about the status of the VPN tunnel are true? <Choose two )

There are separate virtual interfaces for each dial-up client

FortiGate created a single IPsec virtual interface that is shared by all clients

100.64.3.1 is one of the remote IP address that comes through index interlace 1.

VPN static routes are prevented from populating the FortiGate routing table

NO.24 Refer to exhibits.

Exhibit A shows the performance SLA exhibit B shows the SD-WAN diagnostics output.
Based on the exhibits, which statement is correct?

Port1 became dead because no traffic was offload through the egress of port1.

SD-WAN member interfaces are affected by the SLA state of the inactive interface.

Both SD-WAN member interfaces have used separate SLA targets.

The SLA state of port1 is dead after five unanswered requests by the SLA servers.

NO.25 What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two )

Specify outgoing interface routing cost.

Configure SD-WAN rules interface preference.

Select SD-WAN balancing strategy.

Specify incoming interfaces in SD-WAN rules.

NO.26 What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

Per-IP shaping mode

Reverse policy shaping mode

Interface-based shaping mode

Shared policy shaping mode

NO.27 Which feature enables SD-WAN to combine IPsec VPN dynamic shortcut tunnels between spokes and a static tunnel to the hub?

ADVPN

GRE

SSLVPN

OCVPN

NO.28 Which diagnostic command can you use to show the SD-WAN rules interface information and state?

diagnose sys virtual-wan-link neighbor.

diagnose sys virtual-wan-link route-tag-list

diagnose sys virtual-wan-link member.

diagnose sys virtual-wan-link service

NO.29 Which three parameters are available to configure SD-WAN rules? (Choose three.)

Application signatures

Type of physical link connection

URL categories

Source and destination IP address

Internet service database (ISDB) address object

NO.30 Refer to the exhibit.

FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

Specify a unique peer ID for each dial-up VPN interface.

Use different proposals are used between the interfaces.

Configure the IKE mode to be aggressive mode.

Use unique Diffie Hellman groups on each VPN interface.

NO.31 Refer to the exhibit.

Based on the exhibit, which two statements about traffic passing through the SD WAN member port2 are true? (Choose two)

FortiGate marks an existing session routing information as persistent

FortiGate, by default, resets all session routing information after a route change

FortiGate flushes all routing information from the session table after a route change

FortiGate performs new routing lookups for new packets after a route change

NO.32 Refer to exhibits.

Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.
The traffic shaping policy is being applied to all outbound traffic; however, inbound traffic is not being evaluated by the shaping policy.
Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?

Create a new firewall policy, and the select the SD-WAN zone as Incoming Interface.

In the traffic shaping policy, select Assign Shaping Class ID as Action.

In the firewall policy, select Proxy-based as Inspection Mode.

In the traffic shaping policy, enable Reverse shaper, and then select the traffic shaper to use.

NO.33 Refer to the exhibit.

Based on output shown in the exhibit, which two commands can be used by SD-WAN rules? (Choose two.)

set cost 15.

set source 100.64.1.1.

set priority 10.

set load-balance-mode source-ip-based.

NO.34 In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

Traffic has matched none of the FortiGate policy routes.

Matched traffic failed RPF and was caught by the rule.

The FIB lookup resolved interface was the SD-WAN interface.

An absolute SD-WAN rule was defined and matched traffic.

NO.35 Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SO-WAN interface and the static routes configuration.
Port1 and port2 are member interfaces of the SD-WAN, and port2 becomes a dead member after reaching the failure thresholds Which statement about the dead member is correct?

Subnets 100 .64.1.0/23 and 172 . 20 . 0. 0/16 are reachable only through port1

SD-WAN interface becomes disabled and port1 becomes the WAN interface

Dead members require manual administrator access to bring them back alive

Port2 might become alive when a single response is received from an SLA server

NO.36 Refer to the exhibit.

Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2 The administrator configured ADVPN on the dual regions topology Which two statements are correct if a dynamic site-to-site tunne1 between Toronto and London has been established? (Choose two)

auto-discovery-receiver is enabled on the egress VPN interfaces on the spokes

auto-discovery-sender is enabled on the ingress VPN interfaces on hubs

tunnel-search IS set to phase 2 quick mode selectors

add-route is enabled to install static routes on hub devices

auto-discovery-forwarder IS enabled on all VPN interfaces

NO.37 Refer to the exhibit.

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.

The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.

The traffic shaper drops packets if the bandwidth is less than 2500 KBps.

The measured bandwidth is less than 100 KBps.

NO.38 Refer to the exhibit.

Which two statements about the debug output are true? (Choose two)

The debug output shows per-IP shaper values and real-time readings.

FortiGate provides statistics and reading based on historical traffic logs.

Traffic being controlled by the traffic shaper is under 100 KB/s.

This traffic shaper drops traffic that exceeds the set limits.