Refer to the exhibit.

Which conclusion about the packet debug flow output is correct?
A. The original traffic exceeded the maximum bandwidth of the outgoing interface, and the packet was dropped.
B. The original traffic exceeded the maximum packets per second of the outgoing interface, and the packet was dropped.
C. The reply traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
D. The original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
正解:D
質問 2:
Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)
A. set-route-tag
B. link-down-failover
C. update-source
D. holdtime-timer
正解:B,D
質問 3:
Refer to the exhibits.


An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in exhibit A.
After generating GoToMeeting test traffic, the administrator examined the respective traffic log on FortiAnalyzer, which is shown in exhibit B.
The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.
Which two reasons explain why the traffic matched the implicit SD-WAN rule? (Choose two.)
A. The session 3-tuple did not match any of the existing entries in the ISDB application cache.
B. FortiGate did not refresh the routing information on the session after the application was detected.
C. Full SSL inspection is not enabled on the matching firewall policy.
D. Port1 and port2 do not have a valid route to the destination.
正解:B,C
質問 4:
Which statement is correct about SD-WAN and ADVPN?
A. Routes for ADVPN shortcuts must be manually configured.
B. SD-WAN can steer traffic to ADVPN shortcuts, established over IPsec overlays, configured as SD-WAN members.
C. You must use IKEv2 on IPsec tunnels.
D. SD-WAN does not monitor the health and performance of ADVPN shortcuts.
正解:B
質問 5:
Refer to the exhibit.

The device exchanges routes using IBGP.
Which two statements are correct about the IBGP configuration and routing information on the device? (Choose two.)
A. ibgp-multipath is disabled.
B. Each BGP route is three hops away from the destination.
C. You can run the get router info routing-table database command to display the additional paths.
D. additional-path is enabled.
正解:C,D
Kouzuki -
10日前に購入して問題を全部覚えて行って、ようやく合格することができました。Pass4Testさんに感謝です。