NSE6_SDW_AD-7.6問題集、Fortinet実際の試験問題

質問 1

Refer to the exhibits. The exhibits show two IPsec templates to define Branch IPsec 1 and Branch_IPsec_2. Each template defines a VPN tunnel. The error message that FortiManager displayed when the administrator tried to assign the second template to the FortiGate device is also shown. Which statement best describes the cause of the issue?

A. You should use the same outgoing interface of both templates.

B. You can assign only one IPsec template to each FortiGate device.

C. You can assign only one template with a tunnel type of static to each FortiGate device.

D. You should review the branch1_fgt configuration for configured tunnels in the root VDOM.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 2

Refer to the exhibit. An administrator checks the status of an SD-WAN topology using the FortiManager SD-WAN monitor menus. All members are configured with one or two SLAs. Which two conclusions can you draw from the output shown? (Choose two.)

A. The template view should be used to see the hub devices.

B. branch2_fgt establishes six tunnels to the hubs and they are all up.

C. One member of branch2_fgt is missing the SLAs.

D. This SD-WAN topology contains only two branch devices.

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 3

You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company's SD- WAN hub. Which overlay routing configuration should you use?

A. BGP per overlay with dynamic BGP for ADVPN shortcut routing.

B. BGP per overlay with BGP next-hop convergence for ADVPN shortcut routing.

C. BGP on loopback with dynamic BGP for ADVPN shortcut routing.

D. BGP on loopback with IPsec phase2 selectors for ADVPN shortcut routing.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 4

Refer to the exhibit. For your ZTP deployment, you review the CSV file shown in exhibit and note that it is missing important information. Which two elements must you change before you can import it into FortiManager? (Choose two.)

A. You must define a name for each device

B. You must define a value for each device and each user-defined metadata variable.

C. You must define a value for each device and each metadata variable that defines an IP address.

D. You must associate a device blueprint with each device

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 5

Which statement about SD-WAN zones is true?

A. You cannot use an SD-WAN zone in static route definitions.

B. You can configure up to 32 SD-WAN zones per VDOM.

C. An SD-WAN zone can contain only one type of interface.

D. An SD-WAN zone can contain between 0 and 512 members.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 6

You want to configure SD-WAN on a few FortiGate devices to optimize the use of WAN links and secure internet access. The devices are standalone FortiGate, already centrally managed by FortiManager. Which statement applies?

A. You must move the devices to the SD-WAN Manager section before you can configure SD-WAN rules.

B. You can keep the devices in the Device Manager section. You can configure per-device SD-WAN settings.

C. You can keep the devices in the Device Manager section, but you must place them in a dedicated device group.

D. You must move the devices to the SD-WAN Manager section and use the SD-WAN standalone wizard.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 7

Refer to the exhibits. The exhibits show the source NAT (SNAT) global setting. port2 interface settings, and the routing table on FortiGate.
The administrator increases the member priority on port2 to 20. Upon configuration changes and the receipt of new packets, which two actions does FortiGate perform on existing sessions established over port2? (Choose two.)

A. FortiGate flags the sessions as dirty.

B. FortiGate continues routing all existing sessions over port2.

C. FortiGate flags the SNAT session as dirty only if the administrator has assigned an IP pool to the firewall policies with NAT.

D. FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.

E. FortiGate routes only new sessions over port2.

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

Fortinet NSE 6 - SD-WAN 7.6 Enterprise Administrator - NSE6_SDW_AD-7.6 模擬練習