Fortinet NSE7_FSN_AR-7.6 - Fortinet NSE 7 - Secure Networking 7.6 Architect Exam
Page: 1 / 11
Total 55 questions
Question #1 (Topic: Exam A)
In the context of SD-WAN, the terms underlay and overlay are commonly used to categorize links.
Which two statements about underlay and overlay links are correct? (Choose two.)
Which two statements about underlay and overlay links are correct? (Choose two.)
A. Overlay links provide routing flexibility.
B. Only wired connections can be used as underlay links.
C. A VLAN is a type of overlay link.
D. FortiLink interface is considered an underlay link.
E. Wireless connections can be used to build overlay links.
Answer: AE
Question #2 (Topic: Exam A)
You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use in health-check and SD-WAN rules. You want to delete it.
What happens if you delete the SD-WAN member from the FortiGate GUI?
What happens if you delete the SD-WAN member from the FortiGate GUI?
A. FortiGate accepts the SD-WAN member deletion with no further action.
B. FortiGate displays an error message. SD-WAN zones must contain at least two members.
C. FortiGate accepts the deletion and removes static routes as required.
D. FortiGate accepts the deletion and places the member in the default SD-WAN zone.
Answer: A
Question #3 (Topic: Exam A)
Refer to the exhibits.
An OSPF peer is advertising route 172.16.52.0/24. The local FortiGate is configured with an inbound distribution list that allows the 172.16.0.0/14 network to be injected into its routing table. However, the 172.16.52.0/24 subnet cannot be seen in the FIB.
Which two steps can the administrator of the local FortiGate take to ensure that the advertised 172.16.52.0/24 subnet will be injected into the routing table? (Choose two.)
An OSPF peer is advertising route 172.16.52.0/24. The local FortiGate is configured with an inbound distribution list that allows the 172.16.0.0/14 network to be injected into its routing table. However, the 172.16.52.0/24 subnet cannot be seen in the FIB.
Which two steps can the administrator of the local FortiGate take to ensure that the advertised 172.16.52.0/24 subnet will be injected into the routing table? (Choose two.)
A. Modify the default prefix-list behavior from implicit deny to implicit allow.
B. Change the ge value to 17.
C. Add another entry to the prefix list to specifically allow the 172.16.52.0/24 network.
D. Change the le value to 16.
Answer: BC
Question #4 (Topic: Exam A)
Refer to the exhibit.
An ADVPN network is shown.
You must configure an ADVPN using IBGP for each local region and EBGP across regions to connect Overlay 1 with Overlay 2.
Which two options must you configure in the Hub2Hub BGP peering? (Choose two.)
An ADVPN network is shown.
You must configure an ADVPN using IBGP for each local region and EBGP across regions to connect Overlay 1 with Overlay 2.
Which two options must you configure in the Hub2Hub BGP peering? (Choose two.)
A. set. ebgp-enforce-multihop enable
B. set. ibgp-enforce-multihop advpn
C. set. attribute-unchanged next-hop
D. set. next-hop-self enable
Answer: AC
Question #5 (Topic: Exam A)
Refer to the exhibit.
You want to configure SD-WAN on a network, as shown in the exhibit.
The network contains many FortiGate devices. Some are used as next-generation firewalls (NGFW), and some are installed with extensions such as FortiSwitch, FortiAP, or FortiExtender.
Which factors should you consider when planning your deployment?
You want to configure SD-WAN on a network, as shown in the exhibit.
The network contains many FortiGate devices. Some are used as next-generation firewalls (NGFW), and some are installed with extensions such as FortiSwitch, FortiAP, or FortiExtender.
Which factors should you consider when planning your deployment?
A. You should exclude the FortiGate devices with FortiLink connection from the SD-WAN topology.
B. You should build multiple SD-WAN topologies. Each topology should contain only one type of extension.
C. You can build an SD-WAN topology that includes all devices. The hubs can be FortiGate devices with FortiExtender.
D. You can build an SD-WAN topology that includes all devices. The hubs must be devices without extensions.
Answer: D
