NSE7_SDW-6.4 무료 덤프문제 온라인 액세스

Refer to the exhibit.

What must you configure to enable ADVPN?

• A.Each VPN device has a unique pre-shared key configured separately on phase one
• B.The protected subnets should be set to address object to all (0.0 .0. 0/0).
• C.On the hub VPN, only the device needs additional phase one sett
• D.ADVPN should only be enabled on unmanaged FortiGate devices.

Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

• A.diagnose sys virtual-wan-link sla-log
• B.diagnose sys virtual-wan-link health-check
• C.diagnose sys virtual-wan-link intf-sla-log
• D.diagnose sys virtual-wan-link log

Refer to exhibits.


Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)

• A.All the existing sessions will continue to use port2, and new sessions will use port1.
• B.All the existing sessions using SNAT will be flushed and routed through port1.
• C.All the existing sessions will be blocked from using port1 and port2.
• D.All the existing sessions that do not use SNAT will be flushed and routed through port1.

Which statement about using BGP routes in SD-WAN is true?

• A.Learned routes can be used as dynamic destinations in SD-WAN rules.
• B.You must use BGP to route traffic for both overlay and underlay links.
• C.You must use external BGP.
• D.You must configure AS path prepending.

Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

• A.The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.
• B.A total of six packets are exchanged between an initiator and a responder instead of three packets.
• C.XAuth is enabled as an additional level of authentication, which requires a username and password.
• D.A peer ID is included in the first packet from the initiator, along with suggested security policies.