Fortinet NSE 7 - SD-WAN 6.4 - NSE7_SDW-6.4 Exam Practice Test

Question 1

Which three protocols are available only on the command line to configure as performance SLA status check? (Choose three.)

A. tcp-echo

B. twamp

C. icmp

D. udp-echo

E. smtp

Correct Answer: A,B,D

Question 2

Which two statements about SD-WAN central management are true? (Choose two.)

A. It is enabled by default.

B. It is enabled or disabled on a per-ADOM basis.

C. It uses templates to configure SD-WAN on managed devices.

D. It does not allow you to monitor the status of SD-WAN members.

Correct Answer: B,C

Question 3

Which feature enables SD-WAN to combine IPsec VPN dynamic shortcut tunnels between spokes and a static tunnel to the hub?

A. ADVPN

B. GRE

C. OCVPN

D. SSLVPN

Correct Answer: A

Question 4

Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two)

A. Transport Layer Security (TLS)

B. Encapsulating Security Payload (ESP)

C. Security Association (SA)

D. Secure Shell (SSH)

E. Internet Key Exchange (IKE)

Correct Answer: B,E

Question 5

Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SO-WAN interface and the static routes configuration.
Port1 and port2 are member interfaces of the SD-WAN, and port2 becomes a dead member after reaching the failure thresholds Which statement about the dead member is correct?

A. SD-WAN interface becomes disabled and port1 becomes the WAN interface

B. Port2 might become alive when a single response is received from an SLA server

C. Dead members require manual administrator access to bring them back alive

D. Subnets 100 .64.1.0/23 and 172 . 20 . 0. 0/16 are reachable only through port1

Correct Answer: D

Question 6

Refer to the exhibit.

Which statement about the command route-tag in the SD-WAN rule is true?

A. It ensures route tags match the SD-WAN rule based on the rule order

B. It tags each route and references the tag in the routing table.

C. It uses route tags for a BGP community and assigns the SD-WAN rules with same tag.

D. It enables the SD-WAN rule to load balance and assign traffic with a route tag

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Which two reasons make forward error correction (FEC) ideal to enable in a phase one VPN interface? (Choose two )

A. FEC transmits the original payload in full to recover the error in transmission.

B. FEC reduces the stress on the remote device jitter buffer to reconstruct packet loss

C. FEC is useful to increase speed at which traffic is routed through IPsec tunnels.

D. FEC transmits additional packets as redundant data to the remote device.

E. FEC improves reliability which overcomes adverse WAN conditions such as noisy links.

Correct Answer: D,E

Question 8

Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

A. The SLA state of port2 has exceeded three consecutive unanswered requests from the SLA server.

B. Port2 needs to wait 500 milliseconds to change the status from alive to dead.

C. The dead member interface stays unavailable until an administrator manually brings the interface back.

D. Check interval is the time to wait before a packet sent by a member interface considered as lost.

Correct Answer: A

Question 9

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

A. The zero-touch provisioning process has completed internally, behind FortiGate.

B. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager

C. The FortiGate cloud key has not been added to the FortiGate cloud portal.

D. FortiGate has obtained a configuration from the platform template in FortiGate cloud.

E. A factory reset performed on FortiGate.

Correct Answer: A,C

Fortinet NSE 7 - SD-WAN 6.4 - NSE7_SDW-6.4 Exam Practice Test

Latest Update

Useful Links

Contact Us