Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
 

Fortinet NSE7_SDW-7.2 Exam Actual Questions

The questions for NSE7_SDW-7.2 were last updated on Nov. 12, 2024.
  • Viewing page 1 out of 18 pages.
  • Viewing questions 1-4 out of 70 questions

Topic 1 - Exam A

Question #1 Topic 1

Refer to the exhibit.

The exhibit shows the BGP configuration on the hub in a hub-and-spoke topology. The administrator wants BGP to advertise prefixes from spokes to other spokes over the IPsec overlays, including additional paths. However, when looking at the spoke routing table, the administrator does not see the prefixes from other spokes and the additional paths.
Based on the exhibit, which three settings must the administrator configure inside each BGP neighbor group so spokes can learn other spokes prefixes and their additional paths? (Choose three.)

  • A. Enable soft-reconfiguration
  • B. Enable route-reflector-client
  • C. Set additional-path to send
  • D. Set adv-additional-path to the number of additional paths to advertise
  • E. Set advertisement-interval to the number of additional paths to advertise
Reveal Solution Hide Solution   Discussion   10

Correct Answer: BCD 🗳️

Question #2 Topic 1

What are two advantages of using an IPsec recommended template to configure an IPsec tunnel in an hub-and-spoke topology? (Choose two.)

  • A. It ensures consistent settings between phase1 and phase2.
  • B. It guides the administrator to use Fortinet recommended settings.
  • C. The VPN monitor tool provides additional statistics for tunnels defined with an IPsec recommended template.
  • D. It automatically install IPsec tunnels to every spoke when they are added to the FortiManager ADOM.
Reveal Solution Hide Solution   Discussion   5

Correct Answer: AB 🗳️

Question #3 Topic 1

Refer to the exhibit.

  • A. FortiGate does not change the routing information on existing sessions that use a valid gateway, after a route change.
  • B. FortiGate always blocks all traffic, after a route change.
  • C. FortiGate performs routing lookups for new sessions only, after a route change.
  • D. FortiGate flushes all routing information from the session table, after a route change.
Reveal Solution Hide Solution   Discussion   20

Correct Answer: A 🗳️

Question #4 Topic 1

In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

  • A. It provides the benefits of a full-mesh topology in a hub-and-spoke network.
  • B. It enables spokes to establish shortcuts to third-party gateways.
  • C. It provides direct connectivity between spokes by creating shortcuts.
  • D. It enables spokes to bypass the hub during shortcut negotiation.
Reveal Solution Hide Solution   Discussion   4

Correct Answer: AC 🗳️

Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...