Fortinet NSE6_SDW_AD-7.6 Free Dumps (Part 2, Q41-Q80) V10.03 Released: Check More About the Latest Practice Questions

With the most updated NSE6_SDW_AD-7.6 dumps (V10.03), you can pass your Fortinet NSE 6 – SD-WAN 7.6 Enterprise Administrator exam confidently and efficiently. This version contains 257 practice questions and answers to help you master the exam syllabus and achieve the Fortinet certification smoothly. With these updated NSE6_SDW_AD-7.6 exam dumps, you can focus on important exam questions that are most likely to appear in the real Fortinet NSE 6 – SD-WAN 7.6 Enterprise Administrator practice test. This makes preparation for the exam success more effective and targeted. We before have shared the NSE6_SDW_AD-7.6 free dumps (Part 1, Q1-Q40) V10.03 online, listing 40 free questions to help you check the quality. And today, we will continue to share the NSE6_SDW_AD-7.6 free dumps (Part 2, Q41-Q80) online, letting you check more about the latest practice questions in V10.03. With these demo questions, you can trust that DumpsBase provides the valuable dumps, making your exam easier and pass with confidence.

Reading NSE6_SDW_AD-7.6 free dumps (Part 2, Q41-Q80) V10.03 below, checking more today:

1. Which two features are supported by IKEv2 and not by IKEv1? (Choose two.)

Asymmetric authentication

IKE mode configuration

IKE aggressive mode

Network overlay ID

2. An administrator is troubleshooting VoIP quality issues that occur when calling external phone numbers. The SD-WAN interface on the edge FortiGate is configured with the default settings, and is using two upstream links. One link has random jitter and latency issues, and is based on a wireless connection.

Which two actions must the administrator apply simultaneously on the edge of FortiGate to improve VoIP quality using SD-WAN rules? (Choose two.)

Select the corresponding SD-WAN balancing strategy in the SD-WAN rule.

Choose the suitable interface based on the interface cost and weight.

Use the performance SLA targets to detect latency and jitter instantly.

Place the troublesome link at the top of the interface preference list.

Configure an SD-WAN rule to load balance all traffic without VoI

3. Refer to the exhibits, which show the VPN configuration on a spoke and a hub.









The administrator wants to use those tunnels to build an SD-WAN topology.

Which one parameter must you modify to allow the tunnel to come up and be used in the SD-WAN topology?

Set exchange-interface-ip to enable on the hub side.

Change ike-version to 2 on the hub and the spoke.

Set the type to dynamic on the hub side.

Set mode-cfg to enable on the spoke side.

4. Refer to the exhibit.





Which conclusion about the packet debug flow output is correct?

The packet size exceeded the outgoing interface MT

The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the firewall policy, and the packet was dropped.

The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

5. Refer to the exhibit.





Which two statements about the debug output are correct? (Choose two.)

The debug output shows per-IP shaper values and real-time readings.

This traffic shaper drops traffic that exceeds the set limits.

Traffic being controlled by the traffic shaper is under 1 Kbps.

FortiGate provides statistics and reading based on historical traffic logs.

6. What is the purpose of configuring SD-WAN application profiles?

To configure routing protocols

To configure security policies

To configure application performance monitoring

To configure WAN optimization

7. Which SD-WAN feature allows for the prioritization of critical traffic over less important traffic?

Load balancing

Quality of service (QoS)

Application steering

Link steering

8. What is the purpose of configuring SD-WAN route policies?

To configure routing protocols

To configure security policies

To configure application performance monitoring

To configure VPN connectivity

9. What is the lnkmtd process responsible for?

Flushing route tags addresses

Monitoring links for any bandwidth saturation

Logging interface quality information

Processing performance SLA probes

10. Which are two benefits of using CLI templates in FortiManager? (Choose two.)

You can reference meta fields.

You can configure interfaces as SD-WAN members without having to remove references first.

You can configure FortiManager to sync local configuration changes made on the managed device, to the CLI template.

You can configure advanced CLI settings.

11. Which two interfaces can be added to SD-WAN as members? (Choose two.)

IPsec interface

VLAN

Zone

Virtual wire pair

12. In a hub-and-spoke SD-WAN topology, you choose OaaS for your overlays.

What type of routing can you use on the branches?

Static routing on the overlay network and static routing on the underlay and between the branch-protected subnets.

BGP routing on the overlay network and static routing on the underlay and between the branch-protected subnets.

Static routing on the overlay network and BGP routing on the underlay and between the branch-protected subnets.

OSPF routing on the overlay network and OSPF routing on the underlay and between the branch-protected subnets.

13. In which rule strategy are cost and interface preference not considered selection factors?

Best Quality

Lowest Cost (SLA)

Maximize Bandwidth (SLA)

Manual

14. By default, what member information does FortiGate consider when selecting the best member in a lowest cost (SLA) SD-WAN rule?

Status of configured SLA targets, cost, and priority

Status of configured SLA targets, interface index number, and priority

Interface index number, cost, and priority

Status of configured SLA targets, cost, and corrected metric

15. What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

The FortiGate cloud key has not been added to the FortiGate cloud portal.

FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager.

FortiGAte has obtained a configuration from the platform template in FortiGate cloud.

A factory reset performed on FortiGate.

The zero-touch provisioning process has been completed internally, behind FortiGate.

16. Refer to the exhibit.





The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate appliance that supports hardware offloading.

Based on the information shown in the exhibits, which two statements about the session are true? (Choose two.)

The reply direction of the asymmetric traffic flows from port2 to port3.

The auxiliary session can be offloaded to hardware.

The original direction of the symmetric traffic flows from port3 to port2.

The main session cannot be offloaded to hardware.

17. In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two.)

Traffic has matched none of the FortiGate policy routes.

Matched traffic failed RPF and was caught by the rule.

The FIB lookup resolved interface was the SD-WAN interface.

An absolute SD-WAN rule was defined and matched traffic.

18. What is the purpose of using FortiManager for SD-WAN deployment management?

To configure network connectivity between sites

To centralize configuration and management

To configure security policies

To ensure efficient use of available bandwidth

19. Which component in a hub-and-spoke IPsec topology serves as the central point of management and configuration?

The hub site

The spoke sites

The VPN server

The firewall

20. Which SD-WAN routing protocol is commonly used for hybrid SD-WAN deployments?

Border Gateway Protocol (BGP)

Open Shortest Path First (OSPF)

Routing Information Protocol (RIP)

Enhanced Interior Gateway Routing Protocol (EIGRP)

21. Refer to the exhibits.









Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.

Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

port2 is referenced in a static route.

port1 and port2 are not administratively down.

port1 is referenced in a firewall policy.

port1 is assigned a manual IP address.

22. What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two.)

It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.

It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices.

It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager.

It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager.

23. Refer to the exhibits.

Exhibit A





Exhibit B





Exhibit A shows the source NAT (SNAT) global setting and exhibit B shows the routing table on FortiGate.

Based on the exhibits, which two actions does FortiGate perform on existing sessions established over port2, if the administrator increases the static route priority on port2 to 20? (Choose two.)

FortiGate flags the sessions as dirty.

FortiGate continues routing the sessions with no SNAT, over port2.

FortiGate performs a route lookup for the original traffic only.

FortiGate updates the gateway information of the sessions with SNAT so that they use port1 instead of port2.

24. Which command can be used to verify the configuration of SD-WAN members?

show config members

show members config

show running members

show members running

25. Why is it effective to use SD WAN rules when configuring application control?

Because SD-WAIM rules are independent from firewall policies to avoid controlling applications

Because the application database is manually maintained by administrators

Because you must use certificate full inspection on the firewall policy

Because traffic can be load balanced based on application type

26. Which three protocols are available only on the command line to configure as performance SLA status check? (Choose three.)

twamp

smtp

icmp

tcp-echo

udp-echo

27. What is the purpose of configuring performance SLAs in SD-WAN?

To improve network security

To ensure high application performance

To reduce bandwidth usage

To simplify configuration and management

28. Refer to the exhibits.









The VPN configuration on a spoke and a hub is shown.

The administrator wants to use those tunnels to build an SD-WAN topology.

Which one parameter must you modify to allow the tunnel to come up and be used in the SD-WAN topology?

Set exchange-interface-ip to enable on the hub side.

Set mode-cfg to enable on the spoke side.

Change ike-version to 2 on the hub and the spoke.

Set the type to dynamic on the hub side.

29. An administrator configured a best quality SD-WAN rule with WAN1 and WAN2 as members. WAN1 has the highest configuration priority, and link-cost-threshold is set to 10. FortiGate reports a latency of 100 ms and 120 ms for WAN1 and WAN2, respectively.

Which change in the measured latency will make WAN2 the new preferred member?

When WAN2 has a latency lower than ~91 ms

When WAN1 has a latency lower than 100 ms

When WAN1 has a latency of 120 ms

When WAN2 has a latency of 100 ms

30. Refer to the exhibit.





In a dual-hub hub-and-spoke SD-WAN deployment, which is a benefit of disabling the anti-replay setting on the hubs?

It instructs the hub to disable the reordering of TCP packets on behalf of the receiver, to improve performance.

It instructs the hub to disable TCP sequence number check, which is required for TCP sessions originated from spokes to fail over back and forth between the hubs.

It instructs the hub to not check the ESP sequence numbers on IPsec traffic, to improve performance.

It instructs the hub to skip content inspection on TCP traffic, to improve performance.

31. Which component in a hub-and-spoke IPsec topology serves as the VPN gateway for spoke sites?

The hub site

The spoke sites

The VPN server

The firewall

32. Which statement about using BGP routes in SD-WAN is true?

Adding static routes must be enabled on all ADVPN interfaces.

VPN topologies must be form using only BGP dynamic routing with SD-WA

Learned routes can be used as dynamic destinations in SD-WAN rules.

Dynamic routing protocols can be used only with non-encrypted traffic.

33. Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

Interface-based shaping mode

Reverse-policy shaping mode

Shared-policy shaping mode

Per-IP shaping mode

34. Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)

update-source

set-route-tag

hold time-timer

link-down-failover

35. Refer to exhibits.









Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.

Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)

The implicit rule overrides all other rules because parameters widely cover sources and destinations.

SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.

The All_Access_Rules rule load balances Vimeo application traffic among SD-WAN member interfaces.

The initial session of an application goes through a learning phase in order to apply the correct rule.

36. FortiGate is connected to the internet and is obtaining the IP address on its egress interlace from the DHCP server.

Which statement is due when FortiGate restarts and receives preconfigured settings to install as part of a zero-touch provisioning process?

The zero-touch provisioning process completes internally, behind FortiGate

FortiManager registers FortiGate after the restart and retrieves the existing configuration

The FortiGate cloud key added to the FortiGate cloud portal and FortiGate performs a factory reset before the restart

FortiDeploy connects with FortiGate and provides the initial configuration to contact FortiManager

37. Refer to the exhibits.









An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in exhibit A.

After generating GoToMeeting test traffic, the administrator examined the respective traffic log on FortiAnalyzer, which is shown in exhibit B. The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.

Which two reasons explain why the traffic matched the implicit SD-WAN rule? (Choose two.)

FortiGate did not refresh the routing information on the session after the application was detected.

Port1 and port2 do not have a valid route to the destination.

Full SSL inspection is not enabled on the matching firewall policy.

The session 3-tuple did not match any of the existing entries in the ISDB application cache.

38. If the outgoing interface for an established SNA Ted session changes, which two requirements must the configuration meet so that FortiGate continues forwarding packets from that session to the new outgoing interface? (Choose two.)

You must have a firewall policy that accepts the new traffic flow for the session.

You must configure FortiGate so the SNAT IP address doesn’t change.

You must enable the snat-route-change setting.

You must set firewall-session-dirty to check-new on the new matching firewall policy.

39. Which two statements are correct when traffic matches the implicit SD-WAN rule? (Choose two.)

The sdwan_service_id flag in the session information is 0.

All SD-WAN rules have the default setting enabled.

Traffic does not match any of the entries in the policy route table.

Traffic is load balanced using the algorithm set for the v4-ecmp-mode setting.

40. Refer to the exhibit.





Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

The type of traffic defined and allowed on firewall policy ID 1 is UD

Changes have been made on firewall policy ID 1 on FortiGate.

Firewall policy ID 1 has source NAT disabled.

FortiGate has terminated the session after a change on policy ID 1.

 Loading...