NSE6_SDW_AD-7.6問題集、Fortinet実際の試験問題

質問 1

You want FortiGate to use SD-WAN rules to steer ping local-out traffic .
Which two constraints should you consider? Choose two answers.

A. By default, FortiGate uses SD-WAN rules only for local-out traffic that corresponds to ping and traceroute.

B. You can steer local-out traffic only with SD-WAN rules that use the manual strategy.

C. By default, local-out traffic does not use SD-WAN.

D. You must configure each local-out feature individually to use SD-WAN.

正解: C,D

質問 2

Exhibit.

Which action will FortiGate take if it detects SD-WAN members as dead?

A. FortiGate brings down port5 after it detects all SD-WAN members as dead.

B. FortiGate fails over to the secondary device after it detects port5 as dead.

C. FoftiGate bounces port5 after it detects all SD-WAN members as dead.

D. FortiGate sends alert messages through poft5 when it detects all SD-WAN members as dead

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 3

Refer to the exhibits, which show the configuration of an SD-WAN rule and the corresponding rule status and routing table.

The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule.
Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

A. The traffic will be load balanced across all three overlays

B. The traffic will be routed over HUB1-VPN1.

C. The traffic will be routed over HUB1-VPN3.

D. The traffic will be routed over HUB1-VPN2

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 4

Exhibit.

For your ZTP deployment, you review the CSV file shown in exhibit and note that it is missing important information. Which two elements must you change before you can import it into FortiManager? (Choose two.)

A. You must define a name for each device

B. You must define a value for each device and each user-defined metadata variable.

C. You must define a value for each device and each metadata variable that defines an IP address.

D. You must associate a device blueprint with each device

正解: A,D

質問 5

(You configure the overlay tunnels for an SD-WAN hub-and-spoke topology defined with IPsec tunnels, BGP on loopback, and dynamic BGP.
Which are two recommended IPsec settings for this topology? Choose two answers.)

A. On the spoke, configure the parameter localid .

B. On the hub, set the parameter mode-cfg to enable .

C. On the hub, set the tunnel type to static .

D. On the spoke, set the parameter net-device to enable .

正解: A,D

質問 6

(You are configuring SD-WAN to load balance network traffic and you want to take into account the link quality.
Which two facts should you consider? Choose two answers.)

A. When applicable, FortiGate load balances the traffic through all members that meet the SLA target.

B. You can select the best quality strategy and allow SD-WAN load balancing.

C. The best quality strategy supports only the round-robin hash mode.

D. You can select the lowest cost service level agreement (SLA) strategy and allow SD-WAN load balancing.

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)

A. Each template group can contain up to three IPsec tunnel templates.

B. A CLI template can be of type CLI script or Perl script.

C. CLI templates are applied in order, from top to bottom

D. A CLI template group can contain CLI templates of both types.

E. A template group can include a system template and an SD-WAN template.

正解: C,D,E

解説: (PassTest メンバーにのみ表示されます)

質問 8

(Refer to the exhibit.

The event log on a FortiGate device is shown.
Based on the output shown in the exhibit, what can you conclude about the tunnels on this device? (Choose one answer))

A. There is one shortcut tunnel built from the master tunnel VPN4 .

B. The voice traffic is steered through the VPN tunnel HUB1-VPN3 .

C. The master tunnel HUB2-VPN3 cannot accept Auto-Discovery VPN (ADVPN) shortcuts.

D. The VPN tunnel HUB1-VPN1_0 is a shortcut tunnel.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 9

You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company ' s SD-WAN hub. Which overlay routing configuration should you use?

A. BGP per overlay with dynamic BGP for ADVPN shortcut routing.

B. BGP per overlay with BGP next-hop convergence for ADVPN shortcut routing.

C. BGP on loopback with dynamic BGP for ADVPN shortcut routing.

D. BGP on loopback with IPsec phase2 selectors for ADVPN shortcut routing.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 10

Which three factors about SLA targets and SD-WAN rules should you consider when configuring SD-WAN rules? (Choose three.)

A. Member metrics are measured only if a rule uses the SLA target.

B. SD-WAN rules can use SLA targets to check whether the preferred members meet the SLA requirements.

C. When configuring an SD-WAN rule, you can select multiple SLA targets from different performance SLAs.

D. SLA targets are used only by SD-WAN rules that are configured with a Lowest Cost (SLA) strategy.

E. When configuring an SD-WAN rule, you can select multiple SLA targets if they are from the same performance SLA.

正解: B,D,E

Fortinet NSE 6 - SD-WAN 7.6 Enterprise Administrator - NSE6_SDW_AD-7.6 模擬練習