Refer to the exhibit.
FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)
A. Specify a unique peer ID for each dial-up VPN interface.
B. Use different proposals are used between the interfaces.
C. Configure the IKE mode to be aggressive mode.
D. Use unique Diffie Hellman groups on each VPN interface.
正解:A,C
質問 2:
Refer to the exhibit.
The exhibit shows the SD-WAN rule status and configuration.
Based on the exhibit, which change in the measured packet loss will make T_INET_1_0 the new preferred member?
A. When T_INET_0_0 has 12% packet loss.
B. When T_INET_1_0 has 4% packet loss.
C. When all three members have the same packet loss.
D. When T_INET_0_0 has 4% packet loss.
正解:C
質問 3:
Refer to the exhibit.
Based on the output, which two conclusions are true? (Choose two.)
A. There is more than one SD-WAN rule configured.
B. Entry 1(id=1) is a regular policy route.
C. The all_rules rule represents the implicit SD-WAN rule.
D. The SD-WAN rules take precedence over regular policy routes.
正解:A,B
質問 4:
Refer to the exhibits.
Exhibit A
Exhibit B
Exhibit A shows the SD-WAN performance SLA configuration, the SD-WAN rule configuration, and the application IDs of Facebook and YouTube. Exhibit B shows the firewall policy configuration and the underlay zone status.
Based on the exhibits, which two statements are correct about the health and performance of port1 and port2? (Choose two.)
A. FortiGate identifies the member as dead when there is no Facebook and YouTube traffic passing through the member.
B. The performance is an average of the metrics measured for Facebook and YouTube traffic passing through the member.
C. FortiGate is unable to measure jitter and packet loss on Facebook and YouTube traffic.
D. Non-TCP Facebook and YouTube traffic are not used for performance measurement.
正解:B,D
解説: (Pass4Test メンバーにのみ表示されます)
質問 5:
Which two interfaces are considered overlay links? (Choose two.)
A. IPsec
B. Physical
C. GRE
D. LAG
正解:A,C
Akizuki -
見やすいレイアウトで内容も充実した情NSE7_SDW-7.2の教科書です。独学等の良い相棒になってくれると思います。