NSE6-SDWAN Practice Questions & Answers • ExamPrepare

18 questions in this view

Page 1 of 3

Question 1

Refer to the exhibit.

How does FortiGate handle the traffic with the source IP address 10.0.1.130 and for destination of the mail server with the IP address 128.66.0.125?

FortiGate router policy

FortiGate diagnose output

FortiGate routes the traffic flow according to the forwarding information base (FIB).
FortiGate steers the traffic flow through port2.
FortiGate load balances the traffic flow through port1 and port2.
FortiGate drops the traffic flow and does not process it further.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Refer to the exhibits.

Two IPsec templates to define Branch_IPsec_1 and Branch_IPsec_2 are shown.

Each template defines a VPN tunnel. When the administrator tried to assign the second template to the FortiGate device, the FortiManager displayed the below error message:

Which statement best describes the cause of the issue?

IPsec template for Branch_IPsec_1

IPsec template for Branch_IPsec_2

You should use the same outgoing interface of both templates.
You should review the branch1_fgt configuration for configured tunnels in the root VDOM.
You can assign only one template with a tunnel type of static to each FortiGate device.
You can assign only one IPsec template to each FortiGate device.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Refer to the exhibit.

An SD-WAN zone configuration on the FortiGate GUI is shown.

What can you conclude about the zone and member configuration on this device?

You can delete the WAN1 zone.
You can add the member B-125 to the WAN3 zone and keep it as a member of the Test zone.
The WAN2 zone contains no member.
You can delete the virtual-wan-link zone.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

When you deploy SD-WAN, you can choose from several common designs. Each design best applies to specific contexts.

Which two statements correctly associate a common SD-WAN design with its main indication or constraint? (Choose two.)

Use remote breakout to centralize traffic inspection and limit local management requirements.
Use a standalone design for sites with only one WAN link to the cloud.
Use a cloud on-ramp topology to improve the performance of cloud applications.
Use a direct internet access (DIA) design to increases the traffic security and allows local devices with limited capabilities.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Refer to the exhibits. You use FortiManager to configure SD-WAN on three branch devices. When you install the device settings, FortiManager prompts you with the error "Copy Failed" for the device branch1_fgt. When you click Log , FortiManager displays the message shown

Refer to the exhibits.

You use FortiManager to configure SD-WAN on three branch devices.

When you install the device settings, FortiManager prompts you with the error "Copy Failed" for the device branch1_fgt. When you click Log, FortiManager displays the message shown in the exhibit.

Based on the exhibits, which statement best describes the root cause of the issue?

The connection between branch1_fgt and FortiManager failed.
Gateways for all members in a zone must be of the same type.
The metadata variable definitions are incomplete or incorrect.
You cannot combine metadata variables and installation targets.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Refer to the exhibit.

Which action will FortiGate take if it detects SD-WAN members as dead?

FortiGate brings down port5 after it detects all SD-WAN members as dead.
FortiGate bounces port5 after it detects all SD-WAN members as dead.
FortiGate fails over to the secondary device after it detects port5 as dead.
FortiGate sends alert messages through port5 when it detects all SD-WAN members as dead.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.