最新NSE 7 Network Security Architect NSE7_SSE_AR-26考試題庫，Fortinet NSE7_SSE

問題1
Refer to the exhibits.

The exhibits show an SD-WAN zone HUB1 and SD-WAN member configuration from an SD-WAN template and the output of command diagnose sys sdwan member collected on a FortiGate device.
Which statement best describes what the diagnose output shows?

A. The diagnose output was collected on the device branch1_fgt.

B. The diagnose output does not correspond to a device configured with the SD-WAN template shown in the exhibit.

C. The diagnose output shows that the HUB1-VPN3 member is dead.

D. The diagnose output was collected on the device branch2_fgt.

正確答案: A

說明：（僅 NewDumps 成員可見）

問題2
Which three factors about SLA targets and SD-WAN rules should you consider when configuring SD-WAN rules? (Choose three.)

A. SD-WAN rules can use SLA targets to check whether the preferred members meet the SLA requirements.

B. Member metrics are measured only if a rule uses the SLA target.

C. When configuring an SD-WAN rule, you can select multiple SLA targets from different performance SLAs.

D. When configuring an SD-WAN rule, you can select multiple SLA targets if they are from the same performance SLA.

E. SLA targets are used only by SD-WAN rules that are configured with a Lowest Cost (SLA) strategy.

正確答案: A,C,E

說明：（僅 NewDumps 成員可見）

問題3
You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company ' s SD-WAN hub. Which overlay routing configuration should you use?

A. BGP on loopback with dynamic BGP for ADVPN shortcut routing.

B. BGP per overlay with dynamic BGP for ADVPN shortcut routing.

C. BGP per overlay with BGP next-hop convergence for ADVPN shortcut routing.

D. BGP on loopback with IPsec phase 2 selectors for ADVPN shortcut routing.

正確答案: A

說明：（僅 NewDumps 成員可見）

問題4
What are two benefits of deploying secure private access with SD-WAN? (Choose two.)

A. ZTNA posture check performed by the hub FortiGate

B. Support of both TCP and UDP applications

C. Inline security inspection by FortiSASE

D. A direct access proxy tunnel from FortiClient to the on-premises FortiGate

正確答案: B,C

說明：（僅 NewDumps 成員可見）

問題5
An administrator configures the performance service-level agreement (SLA) with the probe mode, Prefer Passive.
What are two observable impacts of this configuration? (Choose two.)

A. During passive monitoring, the SLA performance rule cannot detect dead members.

B. FortiGate passively monitors the member if TCP traffic is passing through the member.

C. FortiGate can offload the traffic that is subject to passive monitoring to hardware.

D. After FortiGate switches to active mode, the SLA performance rule falls back to passive monitoring after 3 minutes.

E. FortiGate passively monitors the member if ICMP traffic is passing through the member.

正確答案: A,B

說明：（僅 NewDumps 成員可見）

問題6
Which two features must you configure before FortiGate can steer traffic according to SD-WAN rules?
Choose two answers.

A. Overlay links

B. Underlay links

C. Traffic shaping

D. Security profiles

E. Firewall policies

正確答案: B,E

說明：（僅 NewDumps 成員可見）

問題7
Refer to the exhibit. What conclusions can you draw about the traffic received by FortiGate originating from the source LAN device 10.0.1.133 and destined for the company's SMTP mail server at 10.66.0.125?

Exhibit 1

A. FortiGate steers the traffic from the LAN device 10.0.1.133 to the company SMTP mail server
10.66.0.125 through the SD-WAN member ID 4.

B. FortiGate steers the traffic from the LAN device 10.0.1.133 to the SMTP mail server 10.66.0.125 through the SD-WAN member ID 1 or 2.

C. FortiGate steers the traffic from the LAN device 10.0.1.133 to the company SMTP mail server 10.66
0.125 through port3.

D. ForliGate steers the traffic from the LAN device 10.0.1.133 to the company SMTP mail server
10.66.0.125 through port2.

正確答案: B

說明：（僅 NewDumps 成員可見）

問題8
An administrator is attempting to create two static routes: one for the SD-WAN zone wan-link and one pointing to a specific SD-WAN member interface that currently belongs to the wan-link zone.
Which configuration is required to make this scenario valid? (Choose one answer.)

A. The destination subnets of the two static routes must be different.

B. SD-WAN member must be an IPsec interface.

C. The destination subnet configured on the SD-WAN zone cannot be a default route.

D. Both routes must have the same administrative distance to allow equal-cost multipath (ECMP).

正確答案: A

說明：（僅 NewDumps 成員可見）

問題9
Refer to the exhibits. The interface details, static route configuration, and firewall policies on the managed FortiGate device are shown. You want to configure a new SD-WAN zone, named Underlay, that contains the interfaces port1 and port2. What must be your first action?

Exhibit 1

Exhibit 2

A. Delete the static routes.

B. Delete the firewall policies.

C. Define port1 as an SD-WAN member.

D. Delete the SD-WAN Zone Test.

正確答案: B

說明：（僅 NewDumps 成員可見）

問題10
Refer to the exhibits. The exhibits show two IPsec templates to define Branch IPsec 1 and Branch_IPsec_2.
Each template defines a VPN tunnel. The error message that FortiManager displayed when the administrator tried to assign the second template to the FortiGate device is also shown. Which statement best describes the cause of the issue?

Exhibit 1

A. You can assign only one template with a tunnel type of static to each FortiGate device.

B. You can assign only one IPsec template to each FortiGate device.

C. You should review the branch1_fgt configuration for configured tunnels in the rootVDOM.

D. You should use the same outgoing interface of both templates.

正確答案: B

說明：（僅 NewDumps 成員可見）

先試後買

購買之前，你可以先嘗試下載一個試用版本。目前我們只提供PDF版本的試用DEMO，軟件版本只提供截圖。

專業認證

品質保證

輕松通過

Try Before Buy

最新的真實試題

相關鏈接

聯繫我們