Online Access Free NSE7_SDW-7.0 Exam Questions

Refer to the exhibit.

Based on the exhibit, which two actions does FortiGate perform on traffic passing through port2? (Choose two.)

• A.FortiGate does not change the routing information on existing sessions that use a valid gateway, after a route change.
• B.FortiGate always blocks all traffic, after a route change.
• C.FortiGate flushes all routing information from the session table, after a route change.
• D.FortiGate performs routing lookups for new sessions only, after a route change.

In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

• A.Traffic has matched none of the FortiGate policy routes.
• B.The FIB lookup resolved interface was the SD-WAN interface.
• C.An absolute SD-WAN rule was defined and matched traffic.
• D.Matched traffic failed RPF and was caught by the rule.

Refer to the exhibits.

Which conclusion about the packet debug flow output is correct?

• A.The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the firewall policy, and the packet was dropped.
• B.The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.
• C.The packet size exceeded the outgoing interface MTU.
• D.The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

Refer to the exhibit.

The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate appliance that supports hardware offloading. Based on the information shown in the exhibits, which two statements about the session are true? (Choose two.)

• A.The auxiliary session can be offloaded to hardware.
• B.The reply direction of the asymmetric traffic flows from port2 to port3.
• C.The original direction of the symmetric traffic flows from port3 to port2.
• D.The main session cannot be offloaded to hardware.

Refer to the exhibits.

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups.
Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)

• A.London generates an IKE information message that contains the Toronto public IP address.
• B.Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.
• C.The first packets from Toronto to London are routed through Hub 1 then to Hub 2.
• D.Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.