NSE6_SDW_AD-7.6 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
Which two statements about SD-WAN zones are true? (Choose two.)

A.You are allowed to create static routes that reference an SD-WAN zone.
B.After you add an interface to SD-WAN as member, you must use zones to reference the member in firewall policies.
C.You must configure the SD-WAN zone with a minimum of two members.
D.You can configure only one SD-WAN zone per VDO

正解:

Question No : 2
What is the route-tag setting in an SD-WAN rule used for?

A.To indicate the routes for health check probes.
B.To indicate the destination of a rule based on learned BGP prefixes.
C.To indicate the routes that can be used for routing SD-WAN traffic.
D.To indicate the members that can be used to route SD-WAN traffic.

正解:

Question No : 3
What does forward error correction do?

A.It generates parity packets with redundant data.
B.It reorders packets at the destination.
C.It buffers packets and transmits them at the appropriate speed.
D.It sends the same packets across multiple links.

正解:

Question No : 4
Which diagnostic command can you use to show the SD-WAN rules interface information and state?

A.diagnose sys virtual-wan-link route-tag-list.
B.diagnose sys virtual-wan-link service.
C.diagnose sys virtual-wan-link member.
D.diagnose sys virtual-wan-link neighbor.

正解:

Question No : 5
Refer to exhibits.

Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.
Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)

A.The implicit rule overrides all other rules because parameters widely cover sources and destinations.
B.SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.
C.The All_Access_Rules rule load balances Vimeo application traffic among SD-WAN member interfaces.
D.The initial session of an application goes through a learning phase in order to apply the correct rule.

正解:

Question No : 6
What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

A.The FortiGate cloud key has not been added to the FortiGate cloud portal.
B.FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager.
C.FortiGAte has obtained a configuration from the platform template in FortiGate cloud.
D.A factory reset performed on FortiGate.
E.The zero-touch provisioning process has been completed internally, behind FortiGate.

正解:

Question No : 7
Refer to the exhibit.

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

A.The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.
B.The traffic shaper drops packets if the bandwidth is less than 2500 KBps.
C.The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.
D.The measured bandwidth is less than 100 KBps.

正解:

Question No : 8
Refer to the exhibit.

The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate appliance that supports hardware offloading.
Based on the information shown in the exhibits, which two statements about the session are true? (Choose two.)

A.The reply direction of the asymmetric traffic flows from port2 to port3.
B.The auxiliary session can be offloaded to hardware.
C.The original direction of the symmetric traffic flows from port3 to port2.
D.The main session cannot be offloaded to hardware.

正解:

Question No : 9
Which command can be used to verify the configuration of SD-WAN members?

A.show config members
B.show members config
C.show running members
D.show members running

正解:

Question No : 10
Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two.)

A.It creates redundant tunnels between hub-and-spokes, in case failure takes place on the primary links.
B.It dynamically assigns cost and weight between the hub and the spokes, based on the physical distance.
C.It ensures that spoke-to-spoke traffic no longer needs to flow through the tunnels through the hub.
D.It provides direct connectivity between all sites by creating on-demand tunnels between spokes.

正解:

Question No : 11
Which statement defines how a per-IP traffic shaper of 10 Mbps is applied to the entire network?

A.The 10 Mbps bandwidth is shared equally among the IP addresses.
B.Each IP is guaranteed a minimum 10 Mbps of bandwidth.
C.FortiGate allocates each IP address a maximum 10 Mbps of bandwidth.
D.A single user uses the allocated bandwidth divided by total number of users.

正解:

Question No : 12
Which statement is correct about the SD-WAN and ADVPN?

A.Spoke supports dynamic VPN as a static interface.
B.Dynamic VPN is not supported as an SD-WAN interface.
C.ADVPN interface can be a member of SD-WAN interface.
D.Hub FortiGate is limited to using ADVPN as an SD-WAN member interface.

正解:

Question No : 13
Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)

A.update-source
B.set-route-tag
C.hold time-timer
D.link-down-failover

正解:

Question No : 14
What is the lnkmtd process responsible for?

A.Flushing route tags addresses
B.Monitoring links for any bandwidth saturation
C.Logging interface quality information
D.Processing performance SLA probes

正解:

Question No : 15
FortiGate is connected to the internet and is obtaining the IP address on its egress interlace from the DHCP server.
Which statement is due when FortiGate restarts and receives preconfigured settings to install as part of a zero-touch provisioning process?

A.The zero-touch provisioning process completes internally, behind FortiGate
B.FortiManager registers FortiGate after the restart and retrieves the existing configuration
C.The FortiGate cloud key added to the FortiGate cloud portal and FortiGate performs a factory reset before the restart
D.FortiDeploy connects with FortiGate and provides the initial configuration to contact FortiManager

正解:

Fortinet NSE6_SDW_AD-7.6 問題練習