Question No. 1

Which components make up the secure SD-WAN solution?

AApplication, antivirus, and URL, and SSL inspection

BDatacenter, branch offices, and public cloud

CFortiGate, FortiManager, FortiAnalyzer, and FortiDeploy

DTelephone, ISDN, and telecom network.

Show Answer

Correct Answer: C

Question No. 2

Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

ASet priority 10.

BSet cost 15.

CSet load-balance-mode source-ip-ip-based.

DSet source 100.64.1.1.

Show Answer

Correct Answer: A, B

Question No. 3

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

AThe FortiGate cloud key has not been added to the FortiGate cloud portal.

BFortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager

CThe zero-touch provisioning process has completed internally, behind FortiGate.

DFortiGate has obtained a configuration from the platform template in FortiGate cloud.

EA factory reset performed on FortiGate.

Show Answer

Correct Answer: A, C

Question No. 4

Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

AA peer ID is included in the first packet from the initiator, along with suggested security policies.

BXAuth is enabled as an additional level of authentication, which requires a username and password.

CA total of six packets are exchanged between an initiator and a responder instead of three packets.

DThe use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

Show Answer

Correct Answer: B, C

Question No. 5

Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

AThe type of traffic defined and allowed on firewall policy ID 1 is UDP.

BFortiGate has terminated the session after a change on policy ID 1.

CChanges have been made on firewall policy ID 1 on FortiGate.

DFirewall policy ID 1 has source NAT disabled.

Show Answer

Correct Answer: C

Free Fortinet NSE7_SDW-6.4 Exam Actual Questions

The questions for NSE7_SDW-6.4 were last updated On Apr 25, 2024