Free Fortinet NSE7_SDW-7.2 Exam Questions

Become Fortinet Certified with updated NSE7_SDW-7.2 exam questions and correct answers

Page: 1 / 19

Total 93 Questions | Updated On: Jan 02, 2024

Add To Cart

Question 1

Which two protocols in the IPsec suite are most used for authentication and encryption? (Choosetwo.)

A : Encapsulating Security Payload (ESP)

B : Secure Shell (SSH)

C : Internet Key Exchange (IKE)

D : Security Association (SA)

Answer: A,C

Question 2

Refer to the exhibit.

Based on the exhibit, which action does FortiGate take?

A : FortiGate bounces port5 after it detects all SD-WAN members as dead.

B : FortiGate fails over to the secondary device after it detects all SD-WAN members as dead.

C : FortiGate brings up port5 after it detects all SD-WAN members as alive.

D : FortiGate brings down port5 after it detects all SD-WAN members as dead.

Answer: D

Question 3

Refer to the exhibit.

Based on the exhibit, which action does FortiGate take?

A : FortiGate bounces port5 after it detects all SD-WAN members as dead.

B : FortiGate fails over to the secondary device after it detects all SD-WAN members as dead.

C : FortiGate brings up port5 after it detects all SD-WAN members as alive.

D : FortiGate brings down port5 after it detects all SD-WAN members as dead.

Answer: A

Question 4

Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

A : get router info routing-table all

B : diagnose debug application ike

C : diagnose vpn tunnel list

D : get ipsec tunnel list

Answer: B

Question 5

Refer to the exhibit.

Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?

A : type must be set to static.

B : mode-cfg must be enabled.

C : exchange-interface-ip must be enabled.

D : add-route must be disabled.

Answer: D

Page: 1 / 19

Total 93 Questions | Updated On: Jan 02, 2024

Add To Cart