Cisco®
Oracle
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
SAP
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
All Vendors
  2. Home
  3. Exams
  4. Fortinet
  5. NSE7_SDW-6.4

Free Fortinet NSE7_SDW-6.4 Exam Braindumps (page: 3)

Page 3 of 21
PDF with 81 Questions

Refer to the exhibit.



Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

  1. The type of traffic defined and allowed on firewall policy ID 1 is UDP.
  2. FortiGate has terminated the session after a change on policy ID 1.
  3. Changes have been made on firewall policy ID 1 on FortiGate.
  4. Firewall policy ID 1 has source NAT disabled.

Answer(s): C



What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

  1. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.
  2. It improves SD-WAN performance on the managed FortiGate devices.
  3. It sends probe signals as health checks to the beacon servers on behalf of FortiGate.
  4. It acts as a policy compliance entity to review all managed FortiGate devices.
  5. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.

Answer(s): A,E



In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

  1. Traffic has matched none of the FortiGate policy routes.
  2. Matched traffic failed RPF and was caught by the rule.
  3. The FIB lookup resolved interface was the SD-WAN interface.
  4. An absolute SD-WAN rule was defined and matched traffic.

Answer(s): A,C



Refer to the exhibit.



FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.

Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

  1. Specify a unique peer ID for each dial-up VPN interface.
  2. Use different proposals are used between the interfaces.
  3. Configure the IKE mode to be aggressive mode.
  4. Use unique Diffie Hellman groups on each VPN interface.

Answer(s): A,C

Explanation:

SD-WAN 6.4.5 Study Guide. pg 182



Viewing page 3 of 21
Viewing questions 9 - 12 out of 81 questions



Post your Comments and Discuss Fortinet NSE7_SDW-6.4 exam prep with other Community members:

NSE7_SDW-6.4 Exam Discussions & Posts