NSE 7 - SASE 26 Architect Practice Questions & Answers • ExamPrepare

29 questions in this view

Page 1 of 5

Question 1

Refer to the exhibit.

How does FortiGate handle the ICMP traffic with the source IP address 10.0.1.125 and the destination IP address 128.66.0.125?

FortiGate Diagnose Output

FortiGate Routing Table

FortiGate steers the traffic flow through port2.
FortiGate load balances the traffic flow through port7 and port8.
FortiGate drops the traffic flow.
FortiGate routes the traffic flow according to the forwarding information base (FIB).

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Which three factors about service-level agreement (SLA) targets and SD-WAN rules should you consider when configuring SD-WAN rules? (Choose three.)

SLA targets are used by only SD-WAN rules that are configured with a lowest cost (SLA) strategy.
Member metrics are measured when a performance SLA references them.
Best quality SD-WAN rules cannot use SLA targets.
When configuring an SD-WAN rule, you can select multiple SLA targets from the same performance SLA.
When configuring an SD-WAN rule, you can select only one SLA target.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Refer to the exhibits.

The exhibits show an SD-WAN zone HUB1 and SD-WAN member configuration from an SD-WAN template and the output of command diagnose sys sdwan member collected on a FortiGate device.

Which statement best describes what the diagnose output shows?

SD-WAN zone HUB1 and SD-WAN member configuration

SD-WAN zone HUB2 and SD-WAN member configuration

Output of command diagnose sys sdwan member

The diagnose output was collected on the device branch1_fgt.
The diagnose output does not correspond to a device configured with the SD-WAN template shown in the exhibit.
The diagnose output shows that the HUB1-VPN3 member is dead.
The diagnose output was collected on the device branch2_fgt.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

How is the geofencing feature used on FortiSASE?

To allow or block remote user connections to FortiSASE points of presence (POPs) based on source country
To encrypt data at rest on endpoints located in specific countries
To monitor and block access to personal content from specific countries
To restrict application access based on time of day in specific countries

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

You configure the overlay tunnels for an SD-WAN hub-and-spoke topology defined with IPsec tunnels, BGP on loopback, and dynamic BGP.

Which are two recommended IPsec settings for this topology? (Choose two.)

On the spoke, set the parameter net-device to enable .
On the spoke, configure the parameter localid .
On the hub, set the parameter mode-cfg to enable .
On the hub, set the tunnel type to static .

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

During the implementation of endpoint‑based access controls on FortiSASE, an administrator must determine how security posture tags will improve policy enforcement and performance across managed devices.

In this context, what are two advantages of using security posture tags? (Choose two.)

Security posture tags can determine the security posture of an endpoint.
Security posture tags can help monitor endpoint system resource use.
Security posture tags can be used to allow or deny access to network resources.
Security posture tags can be assigned to endpoint profiles based on user groups.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.