NSE 7 - Secure Networking 7.6 Architect Practice Questions & Answers • ExamPrepare

29 questions in this view

Page 1 of 5

Question 1

Refer to the exhibit. The partial output of an OSPF command is shown. While checking the OSPF status of FortiGate, you receive the output shown

in the exhibit.

Based on the output, which two statements about FortiGate are correct? (Choose two.)

FortiGate is a backup designated router.
FortiGate has OSPF ECMP enabled.
FortiGate is connected to multiple areas.
FortiGate injects external routing information.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

You want to harden the SSL/SSH Inspection profile for access to HTTPS web servers.

Which two configuration changes allow you to remove vulnerabilities? (Choose two.)

Set Server certificate SNI check to Enable .
Set unsupported-ssl-version to block .
Set U ntrusted SSL certificates to Ignore .
Set min-allowed-ssl-version to ssl-3.0 .

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Refer to the exhibit.

Which SD-WAN rule and interface uses FortiGate to steer the traffic from the LAN subnet 10.0.1.0/24 to the corporate server 10.2.5.254?

SD-WAN configuration on FortiGate

SD-WAN service rule 4 and interface port2.
SD-WAN service rule 3 and interface HUB1-VPN2.
SD-WAN service rule 4 and port1 or port2.
SD-WAN service rule 3 and interface HUB1-VPN3.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

As an IT manager, you want to delegate the installation and management of your SD-WAN deployment to a managed security service provider (MSSP).

Each site must maintain direct internet access and be secure. You expect significant traffic flow between the sites and want to delegate as much of the network administration and management as possible to the MSSP.

Which two MSSP deployment blueprints address the your requirements? (Choose two.)

Use a shared hub on the MSSP premises and a dedicated hub on the customer premises, and install the spokes on the customer premises.
Use a shared hub on the MSSP premises with a dedicated VDOM for the customer, and install the spokes on the customer premises.
Install a dedicated hub on the MSSP premises for the customer, and install the spokes on the customer premises.
Install the hub and spokes on the customer premises, and enable the MSSP to manage the SD-WAN deployment using FortiManager with a dedicated ADOM.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Refer to the exhibits.

An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first exhibit.

After generating GoToMeeting test traffic, the administrator examined the corresponding traffic log on FortiAnalyzer, which is shown in the second exhibit.

The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.

Which two reasons explain why some log messages show that the traffic matched the implicit SD-WAN rule? (Choose two.)

SD-WAN service details

GoToMeeting traffic log on FortiAnalyzer

FortiGate could not refresh the routing information on the session after the application was detected.
No configured SD-WAN rule matches the traffic related to the collaboration application GoToMeeting.
Full SSL inspection is not enabled on the matching firewall policy.
The session 3-tuple did not match any of the existing entries in the ISDB application cache.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Refer to the exhibits.

Which two statements are true about the health and performance of SD-WAN members 3 and 4? (Choose two.)

Underlay zone status

Only related TCP traffic is used for performance measurement.
Encrypted traffic is not used for the performance measurement.
FortiGate identifies the member as dead when there is no Facebook and YouTube traffic passing through the member.
The performance is an average of the metrics measured for Facebook and YouTube traffic passing through the member.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.