Online Access Free NSE7_SDW-6.4 Practice Test

Refer to the exhibit.

Which statement about the command route-tag in the SD-WAN rule is true?

• A.It tags each route and references the tag in the routing table.
• B.It ensures route tags match the SD-WAN rule based on the rule order
• C.It uses route tags for a BGP community and assigns the SD-WAN rules with same tag.
• D.It enables the SD-WAN rule to load balance and assign traffic with a route tag

Refer to exhibits.


Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)

• A.All the existing sessions will be blocked from using port1 and port2.
• B.All the existing sessions using SNAT will be flushed and routed through port1.
• C.All the existing sessions will continue to use port2, and new sessions will use port1.
• D.All the existing sessions that do not use SNAT will be flushed and routed through port1.

Refer to the exhibit.
Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2 The administrator configured ADVPN on the dual regions topology

Which two statements are correct if a user in Toronto sends traffic to London? (Choose two )

• A.London generates an IKE information message that contains the Toronto public IP address.
• B.Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.
• C.The first packets from Toronto to London are routed through Hub 1 then to Hub 2.
• D.Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.

Which statement about using BGP routes in SD-WAN is true?

• A.You must configure AS path prepending.
• B.Learned routes can be used as dynamic destinations in SD-WAN rules.
• C.You must use external BGP.
• D.You must use BGP to route traffic for both overlay and underlay links.

Why is it effective to use SD WAN rules when configuring application control?

• A.Because you must use certificate full inspection on the firewall policy
• B.Because traffic can be load balanced based on application type
• C.Because the application database is manually maintained by administrators
• D.Because SD-WAIM rules are independent from firewall policies to avoid controlling applications