최신 NSE7_SDW-6.4 무료덤프 - Fortinet NSE 7

문제1

Refer to the exhibit.

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

A. The traffic shaper drops packets if the bandwidth is less than 2500 KBps.

B. The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.

C. The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.

D. The measured bandwidth is less than 100 KBps.

정답: B,D

문제2

Which two benefits from using forward error correction (FEC) in IPsec VPNs are true? (Choose two.)

A. FEC reduces the stress on the remote device buffer to reconstruct packet loss.

B. FEC transmits additional packets as redundant data to the remote device.

C. FEC transmits the original payload in full to recover the error in transmission.

D. FEC improves reliability, which overcomes adverse WAN conditions such as noisy links.

정답: B,D

문제3

Which two reasons make forward error correction (FEC) ideal to enable in a phase one VPN interface? (Choose two )

A. FEC reduces the stress on the remote device jitter buffer to reconstruct packet loss

B. FEC is useful to increase speed at which traffic is routed through IPsec tunnels.

C. FEC improves reliability which overcomes adverse WAN conditions such as noisy links.

D. FEC transmits additional packets as redundant data to the remote device.

E. FEC transmits the original payload in full to recover the error in transmission.

정답: C,D

문제4

Which action FortiGate performs on traffic that is subject to a per-IP traffic shaper of 10 Mbps?

A. FortiGate shares 10 Mbps of bandwidth equally among all source IP addresses.

B. FortiGate applies traffic shaping to the original traffic direction only.

C. FortiGate guarantees a minimum of 10 Mbps of bandwidth to each source IP address.

D. FortiGate limits each source IP address to a maximum bandwidth of 10 Mbps.

정답: D

문제5

Which two statements describe how IPsec phase 1 aggressive mode is different from main mode when performing IKE negotiation? (Choose two)

A. XAuth is enabled as an additional level of authentication, which requires a username and password.

B. The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

C. A total of six packets are exchanged between an initiator and a responder instead of three packets.

D. A peer ID is included in the first packet from the initiator, along with suggested security policies.

정답: A,C

문제6

Which two statements describe how IPsec phase 1 aggressive mode is different from main mode when performing IKE negotiation? (Choose two)

A. XAuth is enabled as an additional level of authentication, which requires a username and password.

B. The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

C. A total of six packets are exchanged between an initiator and a responder instead of three packets.

D. A peer ID is included in the first packet from the initiator, along with suggested security policies.

정답: A,C

문제7

Refer to the exhibit.

Based on the output, which two conclusions are true? (Choose two.)

A. The SD-WAN rules takes precedence over regular policy routes.

B. The all_rules rule represents the implicit SD-WAN rule.

C. There is more than one SD-WAN rule configured.

D. Entry 1 (id=1) is a regular policy route.

정답: C,D

문제8

Refer to the exhibit.

Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

A. FortiGate does not install IPsec static routes for remote protected networks in the routing table.

B. FortiGate creates separate virtual interfaces for each dial-up client.

C. FortiGate maps the remote gateway 100.64.3.1 to tunnel index interface 1.

D. FortiGate creates a single IPsec virtual interface that is shared by all clients.

정답: C,D

설명: (DumpTOP 회원만 볼 수 있음)

최신 NSE7_SDW-6.4 무료덤프 - Fortinet NSE 7 - SD-WAN 6.4

우리와 연락하기

유용한 링크

최신 업데이트