Fortinet Certification NSE7_SDW-7.0 Exam Questions and Answers PDF

Fortinet NSE 7 - SD-WAN 7.0 Questions and Answers

Question 9

Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

get router info routing-table all

diagnose debug application ike

diagnose vpn tunnel list

get ipsec tunnel list

Question 10

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

The traffic shaper drops packets if the bandwidth is less than 2500 KBps.

The measured bandwidth is less than 100 KBps.

The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.

The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.

Question 11

Which two statements about the SD-WAN zone configuration are true? (Choose two.)

The service-sla-tie-break setting enables you to configure preferred member selection based on the best route to the destination.

You can delete the default zones.

The default zones are virtual-wan-link and SASE.

An SD-WAN member can belong to two or more zones.

Question 12

Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?

You must set ike-version to 1.

You must enable net-device.

You must enable auto-discovery-sender.

You must disable idle-timeout.