Free Fortinet NSE 7 – SD-WAN 6.4 Exam NSE7_SDW-6.4 Exam Practice Test

Which statement defines how a per-IP traffic shaper of 10 Mbps is applied to the entire network?

• FortiGate allocates each IP address a maximum 10 Mbps of bandwidth.
• Each IP is guaranteed a minimum 10 Mbps of bandwidth
• A single user uses the allocated bandwidth divided by total number of users.
• The 10 Mbps bandwidth is shared equally among the IP addresses.

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

• The FortiGate cloud key has not been added to the FortiGate cloud portal.
• FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager
• The zero-touch provisioning process has completed internally, behind FortiGate.
• FortiGate has obtained a configuration from the platform template in FortiGate cloud.
• A factory reset performed on FortiGate.

Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two)

• Secure Shell (SSH)
• Encapsulating Security Payload (ESP)
• Internet Key Exchange (IKE)
• Transport Layer Security (TLS)
• Security Association (SA)

Which two reasons make forward error correction (FEC) ideal to enable in a phase one VPN interface? (Choose two )

• FEC transmits the original payload in full to recover the error in transmission.
• FEC improves reliability which overcomes adverse WAN conditions such as noisy links.
• FEC is useful to increase speed at which traffic is routed through IPsec tunnels.
• FEC transmits additional packets as redundant data to the remote device.
• FEC reduces the stress on the remote device jitter buffer to reconstruct packet loss

Which two statements describe how IPsec phase 1 aggressive mode is different from main mode when performing IKE negotiation? (Choose two)

• XAuth is enabled as an additional level of authentication, which requires a username and password.
• The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.
• Three packets are exchanged between an initiator and a responder instead of six packets.
• The peer ID is included in the first packet from the initiator, along with suggested security policies.

What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )

• It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.
• It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices.
• It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager.
• It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager.

What are two reasons why it is effective to implement the internet service database (ISDB) in an SD-WAN rule? (Choose two )

• The ISDB applies rules to traffic from specific sources, based on application type
• The ISDB is dynamically updated and reduces administrator maintenance
• The ISDB requires application control to maintain signatures and perform load-balancing
• The ISDB covers the SDN dynamic connectors private and public addresses
• The ISDB contains the IP addresses and port ranges of well-known destinations

What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

• Per-IP shaping mode
• Reverse policy shaping mode
• Interface-based shaping mode
• Shared policy shaping mode

Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

• A peer ID is included in the first packet from the initiator, along with suggested security policies.
• XAuth is enabled as an additional level of authentication, which requires a username and password.
• A total of six packets are exchanged between an initiator and a responder instead of three packets.
• The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two )

• It creates redundant tunnels between hub-and-spokes, in case failure takes place on the primary links. D18912E1457D5D1DDCBD40AB3BF70D5D
• It dynamically assigns cost and weight between the hub and the spokes, based on the physical distance.
• It ensures that spoke-to-spoke traffic no longer needs to flow through the tunnels through the hub.
• It provides direct connectivity between all sites by creating on-demand tunnels between spokes.