Fortinet NSE7_SDW-7.0 Quiz 1 Topic 2 Questions 1-5

Question: 1

Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)

AEncapsulating Security Payload (ESP)

BSecure Shell (SSH)

CInternet Key Exchange (IKE)

DSecurity Association (SA)

Show Answer

Question: 2

In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

AIt provides the benefits of a full-mesh topology in a hub-and-spoke network.

BIt provides direct connectivity between spokes by creating shortcuts.

CIt enables spokes to bypass the hub during shortcut negotiation.

DIt enables spokes to establish shortcuts to third-party gateways.

Show Answer

Question: 3

What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

AIt simplifies the deployment and administration of SD-WAN on managed FortiGate devices.

BIt improves SD-WAN performance on the managed FortiGate devices.

CIt sends probe signals as health checks to the beacon servers on behalf of FortiGate.

DIt acts as a policy compliance entity to review all managed FortiGate devices.

EIt reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.

Show Answer

Question: 4

Refer to the exhibit.

q4_NSE7_SDW-7.0

Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)

AFortiGate flushes all sessions.

BFortiGate terminates the old sessions.

CFortiGate does not change existing sessions.

DFortiGate evaluates new sessions.

Show Answer

Question: 5

Refer to the exhibits.

Exhibit A

q5_NSE7_SDW-7.0

Exhibit B -

q5_NSE7_SDW-7.0

Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status.

The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule.

Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

AThe traffic will be load balanced across all three overlays.

BThe traffic will be routed over T_INET_0_0.

CThe traffic will be routed over T_MPLS_0.

DThe traffic will be routed over T_INET_1_0.

Show Answer

Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)

In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

Refer to the exhibit.
Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)

Fortinet NSE7_SDW-7.0 Quiz:1 Topic:2 Questions:1-5

Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)

In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

Refer to the exhibit.Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)

Fortinet NSE7_SDW-7.0 Quiz:1 Topic:2 Questions:1-5

Refer to the exhibit.
Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)