Quiz
SDWAN-P1
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (40)
1Which SD-WAN routing protocol is commonly used for hybrid SD-WAN deployments?
- ARouting Information Protocol (RIP)
- BBorder Gateway Protocol (BGP)
- CEnhanced Interior Gateway Routing Protocol (EIGRP)
- DOpen Shortest Path First (OSPF)
2Which three matching traffic criteria are available in SD-WAN rules?
- AInternet service database (ISDB) address object
- BType of physical link connection
- CSource and destination IP address
- DApplication signatures
- EURL categories
3Which two performance SLA protocols enable you to verify that the server response contains a specific value?
- Atwamp
- Bhttp
- Cicmp
- Ddns
4Which session flag indicates the ID of the matching SD-WAN member?
- Asdwan_mbr_seq
- Bserial
- Cpolicy_id
- Dsdwan_service_id
5Which diagnostic command can you use to show the configured SD-WAN zones and their assigned members?
- Adiagnose sys sdwan interface
- Bdiagnose sys sdwan member
- Cdiagnose sys sdwan zone
- Ddiagnose sys sdwan service
6In which rule strategy are cost and interface preference not considered selection factors?
- AMaximize Bandwidth (SLA)
- BManual
- CLowest Cost (SLA)
- DBest Quality
7What is the purpose of using FortiManager with FortiDeploy for SD-WAN management?
- ATo ensure efficient use of available bandwidth
- BTo configure security policies
- CTo centralize configuration and management
- DTo automate configuration deployment
8Which configuration setting is correct if the responder FortiGate is using a dynamic routing protocol over the IPsec VPN interface?
- ADial-up clients must have XAuth enabled
- Badd-route must be disabled to prevent FortiGate from installing static routes for remote protected networks
- Cpeertype must be set to accept a unique peer ID per IPsec VPN
- Dtype must be set to static
9Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true?
- AFortiGate creates a single IPsec virtual interface that is shared by all clients.
- BFortiGate does not install IPsec static routes for remote protected networks in the routing table.
- CFortiGate creates separate virtual interfaces for each dial-up client.
- DFortiGate maps the remote gateway 100.64.3.1 to tunnel index interface 1.
10An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in exhibit A.
After generating GoToMeeting test traffic, the administrator examined the respective traffic log on FortiAnalyzer, which is shown in exhibit B. The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.
Which two reasons explain why the traffic matched the implicit SD-WAN rule? (Choose two.)
- AFull SSL inspection is not enabled on the matching firewall policy.
- BPort1 and port2 do not have a valid route to the destination.
- CThe session 3-tuple did not match any of the existing entries in the ISDB application cache
- DFortiGate did not refresh the routing information on the session after the application was detected.
11Based on the exhibit, which two actions does FortiGate perform on traffic passing through port2?
(Choose two.)
- AFortiGate always blocks all traffic, after a route change.
- BFortiGate does not change the routing information on existing sessions that use a valid gateway, after a route change.
- CFortiGate flushes all routing information from the session table, after a route change.
- DFortiGate performs routing lookups for new sessions only, after a route change.
12Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?
- Aget router info routing-table
- Bdiagnose sys virtual-wan-link service
- Cget ipsec tunnel list
- Ddiagnose debug application ike
13What is the purpose of configuring DIA (Direct Internet Access) in SD-WAN?
- ATo ensure high application performance
- BTo reduce bandwidth usage
- CTo improve network security
- DTo provide direct internet access to branch sites
14Which FortiManager feature allows for the management of firmware upgrades for SD-WAN devices?
- AFirmware Manager
- BConfiguration Manager
- CDevice Manager
- DAudit Manager
15ExhibitA shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?
- Aport1 is referenced in a firewall policy.
- Bport2 is referenced in a static route.
- Cport1 and port2 are not administratively down.
- Dport1 is assigned a manual IP address.
16What are two reasons why it is effective to implement the internet service database (ISDB) in an SD-WAN rule?
(Choose two )- AThe ISDB applies rules to traffic from specific sources, based on application type
- BThe ISDB requires application control to maintain signatures and perform load-balancing
- CThe ISDB is dynamically updated and reduces administrative overhead.
- DThe ISDB covers the SDN dynamic connectors private and public addresses
- EThe ISDB contains the IP addresses and port ranges of well-known destinations
17Which two interfaces are considered overlay links?
(Choose two.)- AGRE
- BLAG
- CIPsec
- DPhysical
18Which two tasks are part of using central VPN management?
(Choose two.)- AFortiManager installs VPN settings on both managed and external gateways.
- BYou must enable VPN zones for SD-WAN deployments.
- CYou can configure full mesh, star, and dial-up VPN topologies.
- DYou configure VPN communities to define common IPsec settings shared by all VPN gateways.
19Which VPN protocol is commonly used in a hub-and-spoke IPsec topology for SD-WAN and ADVPN?
- APPTP VPN
- BIPsec VPN
- CL2TP VPN
- DSSL VPN
20Which command can be used to troubleshoot SD-WAN routing issues?
- Atraceroute
- Broute
- Cnetstat
- Dping
21What is the purpose of configuring DIA (Direct Internet Access) in SD-WAN?
- ATo reduce bandwidth usage
- BTo provide direct internet access to branch sites
- CTo improve network security
- DTo ensure high application performance
22If the outgoing interface for an established SNATed session changes, which two requirements must the configuration meet so that FortiGate continues forwarding packets from that session to the new outgoing interface?
(Choose two.)- AYou must have a firewall policy that accepts the new traffic flow for the session.
- BYou must enable the snat-route-change setting.
- CYou must set firewall-session-dirty to check-new on the new matching firewall policy.
- DYou must configure FortiGate so the SNAT IP address doesn’t change.
23Why is it effective to use SD WAN rules when configuring application control?
- ABecause you must use certificate full inspection on the firewall policy
- BBecause the application database is manually maintained by administrators
- CBecause traffic can be load balanced based on application type
- DBecause SD-WAIM rules are independent from firewall policies to avoid controlling applications
24Which two statements are correct when traffic matches the implicit SD-WAN rule?
(Choose two.)- AThe sdwan_service_id flag in the session information is 0.
- BTraffic does not match any of the entries in the policy route table.
- CAll SD-WAN rules have the default setting enabled.
- DTraffic is load balanced using the algorithm set for the v4-ecmp-mode setting.
25Which statement about using BGP routes in SD-WAN is true?
- AAdding static routes must be enabled on all ADVPN interfaces.
- BLearned routes can be used as dynamic destinations in SD-WAN rules.
- CVPN topologies must be form using only BGP dynamic routing with SD-WAN.
- DDynamic routing protocols can be used only with non-encrypted traffic.
26In which rule strategy are cost and interface preference not considered selection factors?
- AManual
- BMaximize Bandwidth (SLA)
- CLowest Cost (SLA)
- DBest Quality
27Which are three key routing principles in SD-WAN?
(Choose three.)- AFortiGate performs route lookups for new sessions only.
- BBy default, SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.
- CBy default, SD-WAN members are skipped if they do not have a valid route to the destination.
- DSD-WAN rules have precedence over ISDB routes.
- ERegular policy routes have precedence over SD-WAN rules.
28The exhibit shows the SD-WAN rule status and configuration.Based on the exhibit, which change in the measured packet loss will make T_INET_1_0 the new preferred member?
- AWhen T_INET_0_0 has 4% packet loss.
- BWhen T_INET_0_0 has 12% packet loss.
- CWhen all three members have the same packet loss.
- DWhen T_INET_1_0 has 4% packet loss.
29What are the two minimum configuration requirements for an outgoing interface to be selected once the SD- WAN logical interface is enabled?
(Choose two.)- AConfigure SD-WAN rules interface preference.
- BSpecify outgoing interface routing cost.
- CSpecify incoming interfaces in SD-WAN rules.
- DSelect SD-WAN balancing strategy.
30What are two common use cases for remote internet access (RIA)?
(Choose two.)- AProvide internet access through the hub
- BCentralize security inspection on the hub
- CProvide thorough inspection on spokes
- DProvide direct internet access on spokes
31Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate. Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true?
(Choose two.
- AAll the existing sessions will be blocked from using port1 and port2.
- BAll the existing sessions will continue to use port2, and new sessions will use port1.
- CAll the existing sessions using SNAT will be flushed and routed through port1.
- DAll the existing sessions that do not use SNAT will be flushed and routed through port1.
32What are two roles that SD-WAN orchestrator plays when it works with FortiManager?
(Choose two.)- AIt acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices.
- BIt configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.
- CIt acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager.
- DIt acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager.
33Which SD-WAN traffic shaping technique prioritizes critical applications and limits bandwidth for non-critical applications?
- ALink steering
- BApplication steering
- CLoad balancing
- DQuality of Service (QoS)
34What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process?
(Choose two.)- AFortiGAte has obtained a configuration from the platform template in FortiGate cloud.
- BFortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager.
- CThe zero-touch provisioning process has been completed internally, behind FortiGate.
- DThe FortiGate cloud key has not been added to the FortiGate cloud portal.
- EA factory reset performed on FortiGate.
35An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects the traffic to match SD-WAN rule ID 1 and be routed over T_INET_0_0. However, the traffic is routed over T_INET_1_0.
Based on the output shown in the exhibit, which two reasons can cause the observed behavior?
(Choose two.)
- AT_INET_1_0 has a lower route priority value (higher priority) than T_INET_0_0.
- BT_INET_1_0 has a higher member configuration priority than T_INET_0_0.
- CT_INET_0_0 does not have a valid route to the destination.
- DThe traffic matches a regular policy route configured with T_INET_1_0 as the outgoing device.
36What is the main benefit of using FortiManager for SD-WAN deployment management?
- ASimplified configuration and management
- BBetter network connectivity
- CImproved security
- DIncreased application performance
37Which two statements about SD-WAN zones are true?
(Choose two.)- AAfter you add an interface to SD-WAN as member, you must use zones to reference the member in firewall policies.
- BYou can configure only one SD-WAN zone per VDOM.
- CYou must configure the SD-WAN zone with a minimum of two members.
- DYou are allowed to create static routes that reference an SD-WAN zone.
38Which two SD-WAN template member settings support the use of FortiManager meta fields?
(Choose two.)
- ACost
- BPriority
- CGateway IP
- DInterface member
39The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate appliance that supports hardware offloading.
Based on the information shown in the exhibits, which two statements about the session are true?
(Choose two.)
- AThe original direction of the symmetric traffic flows from port3 to port2.
- BThe reply direction of the asymmetric traffic flows from port2 to port3.
- CThe main session cannot be offloaded to hardware.
- DThe auxiliary session can be offloaded to hardware.
40What is the purpose of using FortiManager for SD-WAN deployment management?
- ATo configure network connectivity between sites
- BTo centralize configuration and management
- CTo configure security policies
- DTo ensure efficient use of available bandwidth
Information
- Description
- Curso interno de empresa Tecnología Quiz on SDWAN-P1, created by Jonathan Vargas Zapata on 16/11/2024.
- Author
- Jonathan Vargas Zapata
- Language
- English
- Views
- 14
- Tags
- Rating
- No ratings yet Rate this quiz