Get Ready for Success with Free Fortinet NSE7

Question 1

What does enabling the exchange-interface-ip setting enable FortiGate devices to exchange?

AThe gateway address of their IPsec interfaces

BThe tunnel ID of their IPsec interfaces

CThe IP address of their IPsec interfaces

DThe name of their IPsec interfaces

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe gateway address of their IPsec interfaces

BThe tunnel ID of their IPsec interfaces

CThe IP address of their IPsec interfaces

DThe name of their IPsec interfaces

Question 2

Which diagnostic command can you use to show the configured SD-WAN zones and their assigned members?

Adiagnose sys sdwan zone

Bdiagnose sys sdwan service

Cdiagnose sys sdwan member

Ddiagnose sys sdwan interface

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

Adiagnose sys sdwan zone

Bdiagnose sys sdwan service

Cdiagnose sys sdwan member

Ddiagnose sys sdwan interface

Question 3

Refer to the exhibit.

Which two SD-WAN template member settings support the use of FortiManager meta fields? (Choose two.)

ACost

BInterface member

CPriority

DGateway IP

Correct : B, D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ACost

BInterface member

CPriority

DGateway IP

Question 4

Refer to the exhibit.

Which are two expected behaviors of the traffic that matches the traffic shaper? (Choose two.)

AThe number of simultaneous connections among all source IP addresses cannot exceed five connections.

BThe traffic shaper limits the combined bandwidth of all connections to a maximum of 5 MB/sec.

CThe number of simultaneous connections allowed for each source IP address cannot exceed five connections.

DThe traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.

Correct : C, D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe number of simultaneous connections among all source IP addresses cannot exceed five connections.

BThe traffic shaper limits the combined bandwidth of all connections to a maximum of 5 MB/sec.

CThe number of simultaneous connections allowed for each source IP address cannot exceed five connections.

DThe traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.

Question 5

Refer to the exhibit.

Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.

The traffic shaping policy is being applied to all outbound traffic; however, inbound traffic is not being evaluated by the shaping policy.

Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?

ACreate a new firewall policy, and the select the SD-WAN zone as Incoming Interface.

BIn the traffic shaping policy, select Assign Shaping Class ID as Action.

CIn the firewall policy, select Proxy-based as Inspection Mode.

DIn the traffic shaping policy, enable Reverse shaper, and then select the traffic shaper to use.

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ACreate a new firewall policy, and the select the SD-WAN zone as Incoming Interface.

BIn the traffic shaping policy, select Assign Shaping Class ID as Action.

CIn the firewall policy, select Proxy-based as Inspection Mode.

DIn the traffic shaping policy, enable Reverse shaper, and then select the traffic shaper to use.

Master Fortinet NSE 7 - SD-WAN 7.2: Unlock Your Network Potential

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: