NSE7_SDW-7.0問題集、Fortinet実際の試験問題

質問 1

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

A. The zero-touch provisioning process has completed internally, behind FortiGate.

B. A factory reset performed on FortiGate.

C. The FortiGate cloud key has not been added to the FortiGate cloud portal.

D. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager

E. FortiGate has obtained a configuration from the platform template in FortiGate cloud.

正解: A,C

質問 2

Which three matching traffic criteria are available in SD-WAN rules? (Choose three.)

A. Source and destination IP address

B. Internet service database (ISDB) address object

C. URL categories

D. Type of physical link connection

E. Application signatures

正解: A,B,E

質問 3

Which are three key routing principles in SD-WAN? (Choose three.)

A. Regular policy routes have precedence over SD-WAN rules.

B. FortiGate performs route lookups for new sessions only.

C. By default, SD-WAN members are skipped if they do not have a valid route to the destination.

D. By default, SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

E. SD-WAN rules have precedence over ISDB routes.

正解: A,C,D

質問 4

Refer to the exhibit.

An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects the traffic to match SD-WAN rule ID 1 and be routed over T_INET_0_0. However, the traffic is routed over T_INET_1_0.
Based on the output shown in the exhibit, which two reasons can cause the observed behavior? (Choose two.)

A. T_INET_1_0 has a lower route priority value (higher priority) than T_INET_0_0.

B. T_INET_1_0 has a higher member configuration priority than T_INET_0_0.

C. T_INET_0_0 does not have a valid route to the destination.

D. The traffic matches a regular policy route configured with T_INET_1_0 as the outgoing device.

正解: C,D

解説: (PassTest メンバーにのみ表示されます)

質問 5

Which two statements about SD-WAN central management are true? (Choose two.)

A. The objects are saved in the ADOM common object database.

B. It does not support meta fields.

C. It uses templates to configure SD-WAN on managed devices.

D. It supports normalized interfaces for SD-WAN member configuration.

正解: A,C

解説: (PassTest メンバーにのみ表示されます)

質問 6

What are two common use cases for remote internet access (RIA)? (Choose two.)

A. Provide thorough inspection on spokes

B. Provide internet access through the hub

C. Provide direct internet access on spokes

D. Centralize security inspection on the hub

正解: B,D

質問 7

What is the route-tag setting in an SD-WAN rule used for?

A. To indicate the routes that can be used for routing SD-WAN traffic.

B. To indicate the destination of a rule based on learned BGP prefixes.

C. To indicate the members that can be used to route SD-WAN traffic.

D. To indicate the routes for health check probes.

正解: B

Fortinet NSE 7 - SD-WAN 7.0 - NSE7_SDW-7.0 模擬練習