Online Access Free NSE7_SDW-6.4 Practice Test

When attempting to establish an IPsec tunnel to FortiGate, all remote users match the FIRST_VPN IPsec VPN. This includes remote users that want to connect to the SECOND_VPN IPsec VPN. Which two configuration changes must you make on both IPsec VPNs so that remote users can connect to their intended IPsec VPN? (Choose two.)

• A.Change the IKE mode to aggressive.
• B.Configure different Diffie Hellman groups.
• C.Configure a unique peer ID.
• D.Configure different proposals.

Refer to the exhibit.

Based on the exhibit, which status description is correct?

• A.Port2 is alive because its packet loss is lower than 10%.
• B.The SD-WAN members are monitored by different performance SLAs.
• C.Port1 is dead because it does not meet the SLA target.
• D.Traffic matching the SD-WAN rule is steered through port2.

Which statement about using BGP routes in SD-WAN is true?

• A.Adding static routes must be enabled on all ADVPN interfaces.
• B.Dynamic routing protocols can be used only with non-encrypted traffic
• C.Learned routes can be used as dynamic destinations in SD-WAN rules
• D.VPN topologies must be form using only BGP dynamic routing with SD-WAN

Which diagnostic command can you use to show the SD-WAN rules interface information and state?

• A.diagnose sys virtual-wan-link service
• B.diagnose sys virtual-wan-link neighbor.
• C.diagnose sys virtual-wan-link route-tag-list
• D.diagnose sys virtual-wan-link member.

Which statement defines how a per-IP traffic shaper of 10 Mbps is applied to the entire network?

• A.The 10 Mbps bandwidth is shared equally among the IP addresses.
• B.Each IP is guaranteed a minimum 10 Mbps of bandwidth
• C.FortiGate allocates each IP address a maximum 10 Mbps of bandwidth.
• D.A single user uses the allocated bandwidth divided by total number of users.