Test
SDWAN-P2
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (40)
1In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule?
(Choose two.)- AThe FIB lookup resolved interface was the SD-WAN interface.
- BAn absolute SD-WAN rule was defined and matched traffic.
- CTraffic has matched none of the FortiGate policy routes.
- DMatched traffic failed RPF and was caught by the rule.
2The device exchanges routes using IBGP. Which two statements are correct about the IBGP configuration and routing information on the device?
(Choose two.)
- AEach BGP route is three hops away from the destination.
- Bibgp-multipath is disabled.
- Cadditional-path is enabled.
- DYou can run the get router info routing-table database command to display the additional paths.
3Which SD-WAN traffic shaping technique prioritizes critical applications and limits bandwidth for non-critical applications?
- AQuality of Service (QoS)
- BLink steering
- CApplication steering
- DLoad balancing
4Based on the exhibit, which two actions does FortiGate perform on traffic passing through port2?
(Choose two.)
- AFortiGate does not change the routing information on existing sessions that use a valid gateway, after a route change.
- BFortiGate performs routing lookups for new sessions only, after a route change.
- CFortiGate always blocks all traffic, after a route change.
- DFortiGate flushes all routing information from the session table, after a route change.
5Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2. The administrator configured ADVPN on the dual regions topology. Which two statements are correct if a user in Toronto sends traffic to London?
(Choose two.)
- AToronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.
- BThe first packets from Toronto to London are routed through Hub 1 then to Hub 2.
- CLondon generates an IKE information message that contains the Toronto public IP address.
- DTraffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.
6What is the purpose of using FortiManager with FortiDeploy for SD-WAN management?
- ATo automate configuration deployment
- BTo centralize configuration and management
- CTo configure security policies
- DTo ensure efficient use of available bandwidth
7Which are two expected behaviors of the traffic that matches the traffic shaper?
(Choose two.)
- AThe number of simultaneous connections among all source IP addresses can exceed 5 connections.
- BThe traffic shaper limits the combined bandwidth of all connections to a maximum of 5 MB/sec.
- CThe number of simultaneous connections allowed for each source IP address can exceed 5 connections.
- DThe traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.
8What is the first step in troubleshooting an SD-WAN issue?
- AReboot the device
- BCheck network connectivity
- CCheck for software updates
- DCheck the device logs
9Based on the exhibit, which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules, among the member interfaces?
- AAll traffic from a source IP to a destination IP is sent to the least used interface.
- BAll traffic from a source IP is sent to the same interface.
- CAll traffic from a source IP to a destination IP Is sent to the same interface.
- DAll traffic from a source IP Is sent to the most used Interface.
10What is the main benefit of deploying a hub-and-spoke IPsec topology for SD-WAN and ADVPN?
- ASimplified configuration and management
- BIncreased application performance
- CImproved security
- DBetter network connectivity
11What are two reasons why it is effective to implement the internet service database (ISDB) in an SD-WAN rule?
(Choose two )- AThe ISDB contains the IP addresses and port ranges of well-known destinations
- BThe ISDB requires application control to maintain signatures and perform load-balancing
- CThe ISDB applies rules to traffic from specific sources, based on application type
- DThe ISDB is dynamically updated and reduces administrative overhead.
- EThe ISDB covers the SDN dynamic connectors private and public addresses
12Which component in a hub-and-spoke IPsec topology serves as the central point of management and configuration?
- AThe hub site
- BThe spoke sites
- CThe VPN server
- DThe firewall
13By default, what member information does FortiGate consider when selecting the best member in a lowest cost (SLA) SD-WAN rule?
- AStatus of configured SLA targets, cost, and priority
- BStatus of configured SLA targets, interface index number, and priority
- CInterface index number, cost, and priority
- DStatus of configured SLA targets, cost, and corrected metric
14Which statement reflects how BGP tags work with SD-WAN rules?
- AVPN topologies are formed using only BGP dynamic routing with SD-WAN.
- BRoute tags are used for a BGP community and the SD-WAN rules are assigned the same tag.
- CBGP tags require that the adding of static routes be enabled on all ADVPN interfaces.
- DBGP tags match the SD-WAN rule based on the order that these rules were installed.
15What is the most common cause of SD-WAN connectivity issues?
- AFirewall configuration errors
- BMisconfigured routing protocols
- CNetwork congestion
- DSoftware bugs
16What is the purpose of configuring SD-WAN application profiles?
- ATo configure routing protocols
- BTo configure security policies
- CTo configure application performance monitoring
- DTo configure WAN optimization
17Which statement defines how a per-IP traffic shaper of 10 Mbps is applied to the entire network?
- AThe 10 Mbps bandwidth is shared equally among the IP addresses.
- BEach IP is guaranteed a minimum 10 Mbps of bandwidth.
- CFortiGate allocates each IP address a maximum 10 Mbps of bandwidth.
- DA single user uses the allocated bandwidth divided by total number of users.
18Which two statements about SD-WAN zones are true?
(Choose two.)- AYou are allowed to create static routes that reference an SD-WAN zone.
- BAfter you add an interface to SD-WAN as member, you must use zones to reference the member in firewall policies.
- CYou must configure the SD-WAN zone with a minimum of two members.
- DYou can configure only one SD-WAN zone per VDOM.
19Which two statements about the status of the VPN tunnel are true?
(Choose two.)
- AThere are separate virtual interfaces for each dial-up client.
- BVPN static routes are prevented from populating the FortiGate routing table.
- CFortiGate created a single IPsec virtual interface that is shared by all clients.
- D100.64.3.1 is one of the remote IP address that comes through index interface 1.
20Which action FortiGate performs on traffic that is subject to a per-IP traffic shaper of 10 Mbps?
- AFortiGate guarantees a minimum of 10 Mbps of bandwidth to each source IP address.
- BFortiGate applies traffic shaping to the original traffic direction only.
- CFortiGate limits each source IP address to a maximum bandwidth of 10 Mbps.
- DFortiGate shares 10 Mbps of bandwidth equally among all source IP addresses.
21Which two statements about the debug output are correct?
(Choose two.)
- AFortiGate provides statistics and reading based on historical traffic logs.
- BThe debug output shows per-IP shaper values and real-time readings.
- CThis traffic shaper drops traffic that exceeds the set limits.
- DTraffic being controlled by the traffic shaper is under 1 Kbps.
22If the outgoing interface for an established SNATed session changes, which two requirements must the configuration meet so that FortiGate continues forwarding packets from that session to the new outgoing interface?
(Choose two.)- AYou must have a firewall policy that accepts the new traffic flow for the session.
- BYou must configure FortiGate so the SNAT IP address doesn’t change.
- CYou must enable the snat-route-change setting.
- DYou must set firewall-session-dirty to check-new on the new matching firewall policy.
23Which FortiManager feature allows for the deployment of configuration changes to multiple SD-WAN devices simultaneously?
- ADevice Manager
- BPolicy Manager
- CConfiguration Manager
- DAudit Manager
24What is the purpose of configuring SD-WAN traffic shaping?
- ATo configure application performance monitoring
- BTo configure network security
- CTo configure virtual networks
- DTo ensure efficient use of available bandwidth
25In an SD-WAN rule, which setting enables you to skip the best-route check for SD-WAN rule matching?
- Agateway
- Blink-cost-threshold
- Ctie-break
- Ddefault
26Based on the exhibit, which status description is correct?
- APort1 is dead because it does not meet the SLA target.
- BPort2 is alive because its packet loss is lower than 10%.
- CThe SD-WAN members are monitored by different performance SLAs.
- DTraffic matching the SD-WAN rule is steered through port2.
27Which two reasons make forward error correction (FEC) ideal to enable in a phase one VPN interface?
(Choose two.)- AFEC is useful to increase speed at which traffic is routed through IPsec tunnels.
- BFEC transmits the original payload in full to recover the error in transmission.
- CFEC transmits additional packets as redundant data to the remote device.
- DFEC improves reliability, which overcomes adverse WAN conditions such as noisy links.
- EFEC reduces the stress on the remote device jitter buffer to reconstruct packet loss.
28What are the two minimum configuration requirements for an outgoing interface to be selected once the SD- WAN logical interface is enabled?
(Choose two.)- ASpecify outgoing interface routing cost.
- BConfigure SD-WAN rules interface preference.
- CSelect SD-WAN balancing strategy.
- DSpecify incoming interfaces in SD-WAN rules.
29Which statement about the trace evaluation by FortiGate is true?
- APackets exceeding the configured maximum concurrent connection limit are denied by the per-IP shaper.
- BThe packet exceeded the configured bandwidth and was dropped based on the priority configuration.
- CThe packet exceeded the configured maximum bandwidth and was dropped by the shared shaper.
- DPackets exceeding the configured concurrent connection limit are dropped based on the priority configuration.
30Based on output shown in the exhibit, which two commands can be used by SD-WAN rules?
(Choose two.)
- Aset cost 15.
- Bset source 100.64.1.1.
- Cset priority 10.
- Dset load-balance-mode source-ip-based.
31Which SD-WAN deployment type is most suitable for FortiManager centralized management?
- AInternet-only SD-WAN
- BHybrid SD-WAN
- CCloud SD-WAN
- DBranch SD-WAN
32What does forward error correction do?
- AIt generates parity packets with redundant data.
- BIt reorders packets at the destination.
- CIt buffers packets and transmits them at the appropriate speed.
- DIt sends the same packets across multiple links.
33What is the purpose of configuring SD-WAN members?
- ATo provide direct internet access to branch sites
- BTo measure and report application performance
- CTo route traffic between branch sites
- DTo provide access to cloud applications
34Based on the output, which two conclusions are true?
(Choose two.)
- AThe all_rules rule represents the implicit SD-WAN rule.
- BThere is more than one SD-WAN rule configured.
- CEntry 1 (id=1) is a regular policy route.
- DThe SD-WAN rules takes precedence over regular policy routes.
35Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD- WAN members. Based on the exhibits, which statement is correct?
- AThe dead member interface stays unavailable until an administrator manually brings the interface back.
- BPort2 needs to wait 500 milliseconds to change the status from alive to dead.
- CThe SLA state of port2 has exceeded three consecutive unanswered requests from the SLA server.
- DCheck interval is the time to wait before a packet sent by a member interface is considered as lost.
36Which command can be used to verify the configuration of SD-WAN members?
- Ashow config members
- Bshow members config
- Cshow running members
- Dshow members running
37Which configuration setting is correct if the responder FortiGate is using a dynamic routing protocol over the IPsec VPN interface?
- Aadd-route must be disabled to prevent FortiGate from installing static routes for remote protected networks
- Bpeertype must be set to accept a unique peer ID per IPsec VPN
- Ctype must be set to static
- DDial-up clients must have XAuth enabled
38Which SD-WAN path control technique involves sending traffic over multiple paths simultaneously?
- AActive-active path
- BActive-passive path
- CDynamic path
- DStatic path
39What is the purpose of using FortiManager for SD-WAN deployment management?
- ATo configure network connectivity between sites
- BTo centralize configuration and management
- CTo configure security policies
- DTo ensure efficient use of available bandwidth
40Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups. Which two outcomes are expected if a user in Toronto sends traffic to London?
(Choose two.)
- ALondon generates an IKE information message that contains the Toronto public IP address.
- BTraffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.
- CToronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.
- DThe first packets from Toronto to London are routed through Hub 1 then to Hub 2.
Información
- Descripción
- Curso interno de empresa Tecnología Test sobre SDWAN-P2, creado por Jonathan Vargas Zapata el 16/11/2024.
- Idioma
- English
- Visitas
- 1
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test