Fortinet NSE7_SDW-6.4 - Fortinet NSE 7 - SD-WAN 6.4 Exam
Page: 3 / 17
Total 81 questions
Question #11 (Topic: Single Topic)
Which components make up the secure SD-WAN solution?
A. FortiGate, FortiManager, FortiAnalyzer, and FortiDeploy
B. Application, antivirus, and URL, and SSL inspection
C. Datacenter, branch offices, and public cloud
D. Telephone, ISDN, and telecom network
Answer: A
Question #12 (Topic: Single Topic)
Refer to the exhibit.

Which two statements about the status of the VPN tunnel are true? (Choose two.)

Which two statements about the status of the VPN tunnel are true? (Choose two.)
A. There are separate virtual interfaces for each dial-up client.
B. VPN static routes are prevented from populating the FortiGate routing table.
C. FortiGate created a single IPsec virtual interface that is shared by all clients.
D. 100.64.3.1 is one of the remote IP address that comes through index interface 1.
Answer: CD
Question #13 (Topic: Single Topic)
Refer to exhibits.


Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.
Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)


Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.
Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)
A. The implicit rule overrides all other rules because parameters widely cover sources and destinations.
B. SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.
C. The All_Access_Rules rule load balances Vimeo application traffic among SD-WAN member interfaces.
D. The initial session of an application goes through a learning phase in order to apply the correct rule.
Answer: AB
Question #14 (Topic: Single Topic)
What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two.)
A. Specify outgoing interface routing cost.
B. Configure SD-WAN rules interface preference.
C. Select SD-WAN balancing strategy.
D. Specify incoming interfaces in SD-WAN rules.
Answer: AB
Question #15 (Topic: Single Topic)
Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?
A. The type of traffic defined and allowed on firewall policy ID 1 is UDP.
B. Changes have been made on firewall policy ID 1 on FortiGate.
C. Firewall policy ID 1 has source NAT disabled.
D. FortiGate has terminated the session after a change on policy ID 1.
Answer: B