Fortinet NSE7_SDW-6.4 Exam Dumps [2022] – Pass NSE7_SDW-6.4 Exam On The First Attempt

Fortinet NSE 7 – SD-WAN 6.4 NSE7_SDW-6.4 exam is one of the popular Fortinet NSE 7 Network Security Architect certification exams, which tests applied knowledge of the integration, administration, troubleshooting, and central management of a secure SD-WAN solution composed of FortiOS 6.4.5 and FortiManager 6.4.5. It is recommended to choose the Fortinet NSE7_SDW-6.4 exam dumps as the preparation materials. Learning all the dumps questions and answers thoroughly, we guarantee that you can pass Fortinet NSE 7 – SD-WAN 6.4 NSE7_SDW-6.4 exam on the first attempt.

Note: Take the NSE7_SDW-6.4 exam and try to pass successfully before November 30, 2022. It will be ended of registration before that day.

Read Fortinet NSE 7 – SD-WAN 6.4 NSE7_SDW-6.4 Free Dumps

Page 1 of 1

1. Refer to the exhibit.





Which statement about the command route-tag in the SD-WAN rule is true?

It enables the SD-WAN rule to load balance and assign traffic with a route tag

It tags each route and references the tag in the routing table.

It uses route tags for a BGP community and assigns the SD-WAN rules with same tag.

It ensures route tags match the SD-WAN rule based on the rule order

 Loading...

2. Which statement is correct about the SD-WAN and ADVPN?

ADVPN interface can be a member of SD-WAN interface.

Dynamic VPN is not supported as an SD-Wan interface.

Spoke support dynamic VPN as a static interface.

Hub FortiGate is limited to use ADVPN as SD-WAN member interface.

 Loading...

3. Refer to exhibits.

Exhibit A.





Exhibit B.





Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy

FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits.

To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?

The shaper mode must be applied per-IP shaper on the traffic shaping policy

The application control profile must be enabled on the firewall policy.

The web filter profile must be enabled on the firewall policy

The URL category must be specified on the traffic shaping policy

 Loading...

4. What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

Per-IP shaping mode

Reverse policy shaping mode

Interface-based shaping mode

Shared policy shaping mode

 Loading...

5. In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two)

Traffic has matched none of the FortiGate policy routes

Matched traffic failed RPF and was caught by the rule.

An absolute SD-WAN rule was defined and matched traffic

The FIB lookup resolved interface was the SD-WAN member interface

 Loading...

6. Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

diagnose sys virtual-wan-link health-check

diagnose sys virtual-wan-link log

diagnose sys virtual-wan-link sla-lcg

diagnose sys virtual-wan-link intf-sla-log

 Loading...

7. Refer to the exhibit.





Which two statements about the debug output are correct? (Choose two)

FortiGate provides statistics and readings based on historical traffic logs.

This traffic shaper drops traffic that exceeds the set limits.

The debug output shows per-lP shaper values and real-time readings.

Traffic being controlled by the traffic shaper is under 1 Kbps

 Loading...

8. What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two)

It improves SD-WAN performance on the managed FortiGate devices.

It simplifies the deployment and administration of SD-WAN on managed FortiGate devices

It sends probe signals as health checks to the beacon servers on behalf of FortiGate

It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server

It acts as a policy compliance entity to review all managed FortiGate devices

 Loading...

9. 1.Refer to exhibits.

Exhibit A.





Exhibit B.





Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.

The traffic shaping policy is being applied to all outbound traffic however inbound traffic is not being evaluated by the shaping policy

Based on the exhibit, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic'?

The reverse shaper option must be enabled and a traffic shaper must be selected

The guaranteed-10mbps option must be selected as the reverse shaper option.

A new firewall policy must be created and SD-WAN must be selected as the incoming interface.

The guaranteed-10mbps option must be selected as the per-IP shaper option

 Loading...

10. Refer to the exhibit.





What must you configure to enable ADVPN?

On the hub VPN, only the device needs additional phase one sett

ADVPN should only be enabled on unmanaged FortiGate devices.

Each VPN device has a unique pre-shared key configured separately on phase one

The protected subnets should be set to address object to all (0.0 .0. o/o).

 Loading...

 Loading...