- All Exams Instant Download
Which two statements about SD-WAN central management are true? (Choose two.)
Which two statements about SD-WAN central management are true? (Choose two.)A . The objects are saved in the ADOM common object database.B . It does not support meta fields.C . It uses templates to configure SD-WAN on managed devices.D . It supports normalized interfaces for SD-WAN member configuration.View AnswerAnswer: AC...
Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?
Refer to the exhibit. Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?A . type must be set to static.B . mode-cfg must be enabled.C . exchange-interface-ip must be enabled.D . add-route must be disabled.View AnswerAnswer: D Explanation: for using...
Based on the output shown in the exhibit, which two reasons can cause the observed behavior?
Refer to the exhibit. An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects the traffic to match SD-WAN rule ID 1 and be routed over T_INET_0_0. However, the traffic is routed over T_INET_1_0. Based on the output shown in...
Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change?
Refer to the exhibit. Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)A . FortiGate flushes all sessions.B . FortiGate terminates the old sessions.C . FortiGate does not change existing sessions.D . FortiGate evaluates new sessions.View AnswerAnswer: C, D Explanation:...
What is the route-tag setting in an SD-WAN rule used for?
What is the route-tag setting in an SD-WAN rule used for?A . To indicate the routes for health check probes.B . To indicate the destination of a rule based on learned BGP prefixes.C . To indicate the routes that can be used for routing SD-WAN traffic.D . To indicate the...
Which two outcomes are expected if a user in Toronto sends traffic to London?
Refer to the exhibits. Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups. Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)A . London generates an IKE information...
Which conclusion about the packet debug flow output is correct?
Refer to the exhibits. Which conclusion about the packet debug flow output is correct?A . The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.B . The packet size exceeded the outgoing interface MTU.C ....
Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)
Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)A . update-sourceB . set-route-tagC . holdtime-timerD . link-down-failoverView AnswerAnswer: C, D
Which are two benefits of using CLI templates in FortiManager? (Choose two.)
Which are two benefits of using CLI templates in FortiManager? (Choose two.)A . You can reference meta fields.B . You can configure interfaces as SD-WAN members without having to remove references first.C . You can configure FortiManager to sync local configuration changes made on the managed device, to the CLI...
Which diagnostic command can you use to show the member utilization statistics measured by performance SLAs for the last 10 minutes?
Which diagnostic command can you use to show the member utilization statistics measured by performance SLAs for the last 10 minutes?A . diagnose sys sdwan intf-sla-logB . diagnose sys sdwan health-checkC . diagnose sys sdwan logD . diagnose sys sdwan sla-logView AnswerAnswer: D Explanation: SD-WAN 7.2 Study Guide page 321...
