Free NSE7_SDW-6.4 Exam Dumps

Question 6

Refer to the exhibit.
NSE7_SDW-6.4 dumps exhibit
Which two statements about the status of the VPN tunnel are true?

A. There are separate virtual interfaces for each dial-up client.
B. VPN static routes are prevented from populating the FortiGate routing table.
C. FortiGate created a single IPsec virtual interface that is shared by all clients.
D. 100.64.3.1 is one of the remote IP address that comes through index interface 1.

Correct Answer:CD

Question 7

Refer to exhibits.
NSE7_SDW-6.4 dumps exhibit

Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.
Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)

A. The implicit rule overrides all other rules because parameters widely cover sources and destinations.
B. SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.
C. The All_Access_Rules rule load balances Vimeo application traffic among SD-WAN member interfaces.
D. The initial session of an application goes through a learning phase in order to apply the correct rule.

Correct Answer:AB

Question 8

Which statement about using BGP routes in SD-WAN is true?

A. Adding static routes must be enabled on all ADVPN interfaces.
B. VPN topologies must be form using only BGP dynamic routing with SD-WAN
C. Learned routes can be used as dynamic destinations in SD-WAN rules
D. Dynamic routing protocols can be used only with non-encrypted traffic

Correct Answer:C

Question 9

Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

A. diagnose sys virtual-wan-link health-check
B. diagnose sys virtual-wan-link log
C. diagnose sys virtual-wan-link sla-log
D. diagnose sys virtual-wan-link intf-sla-log

Correct Answer:C

Question 10

Refer to the exhibit.
NSE7_SDW-6.4 dumps exhibit
Which statement about the trace evaluation by FomGate is true?

A. Packets exceeding the configured maximum concurrent connection limit are denied by the per-IP shaper.
B. The packet exceeded the configured bandwidth and was dropped based on the priority configuration.
C. The packet exceeded the configured maximum bandwidth and was dropped by the shared shaper.
D. Packets exceeding the configured concurrent connection limit are dropped based on the priority configuration.

Correct Answer:A