NSE7_SDW-6.4 Online Practice Questions and Answers

What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two )

A. Specify outgoing interface routing cost.

B. Configure SD-WAN rules interface preference.

C. Select SD-WAN balancing strategy.

D. Specify incoming interfaces in SD-WAN rules.

What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

A. Per-IP shaping mode

B. Reverse policy shaping mode

C. Interface-based shaping mode

D. Shared policy shaping mode

Which statement reflects how BGP tags work with SD-WAN rules?

A. BGP tags match the SD-WAN rule based on the order that these rules were installed.

B. BGP tags require that the adding of static routes be enabled on all ADVPN interfaces

C. Route tags are used for a BGP community and the SD-WAN rules are assigned the same tag

D. VPN topologies are formed using only BGP dynamic routing with SD-WAN

FortiGate is connected to the internet and is obtaining the IP address on its egress interlace from the DHCP server

Which statement is due when FortiGate restarts and receives preconfigured settings to install as part of a zero-touch provisioning process?

A. FortiDeploy connects with FortiGate and provides the initial configuration to contact FortiManager

B. The zero-touch provisioning process completes internally, behind FortiGate

C. FortiManager registers FortiGate after the restart and retrieves the existing configuration

D. The FortiGate cloud key added to the FortiGate cloud portal and FortiGate performs a factory reset before the restart

Which two statements about SD-WAN central management are true? (Choose two.)

A. It does not allow you to monitor the status of SD-WAN members.

B. It is enabled or disabled on a per-ADOM basis.

C. It is enabled by default.

D. It uses templates to configure SD-WAN on managed devices.

In which two ways does FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning? (Choose two.)

A. From a FortiGuard definitions update

B. From the central management configuration configured in FortiDeploy

C. From a DHCP server configured with options 240 or 241

D. From another FortiGate device in the same local network

Refer to exhibits. Exhibit A.

Exhibit B.

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SO-WAN interface and the static routes configuration. Port1 and port2 are member interfaces of the SD-WAN, and port2 becomes a dead member after reaching the failure thresholds Which statement about the dead member is correct?

A. Subnets 100 .64.1.0/23 and 172 . 20 . 0. 0/16 are reachable only through port1

B. SD-WAN interface becomes disabled and port1 becomes the WAN interface

C. Dead members require manual administrator access to bring them back alive

D. Port2 might become alive when a single response is received from an SLA server

Refer to the exhibit.

Which are two expected behaviors of the traffic that matches the traffic shaper? (Choose two.)

A. The traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.

B. The number of simultaneous connections among all source IP addresses can exceed 5 connections.

C. The number of simultaneous connections allowed for each source IP address can exceed 5 connections.

D. The traffic shaper limits the combined bandwidth of all connections to a maximum of 5 MB/sec.

Which statement is correct about SD-WAN and ADVPN?

A. You must use OSPF.

B. SD-WAN can steer traffic to ADVPN shortcuts established over IPsec overlays configured as SD-WAN members.

C. Routes for ADVPN shortcuts must be manually configured.

D. SD-WAN does not monitor the health and performance of ADVPN shortcuts.

Which two benefits from using forward error correction (FEC) in IPsec VPNs are true? (Choose two.)

A. FEC transmits the original payload in full to recover the error in transmission.

B. FEC reduces the stress on the remote device buffer to reconstruct packet loss.

C. FEC transmits additional packets as redundant data to the remote device.

D. FEC improves reliability, which overcomes adverse WAN conditions such as noisy links.