- All Exams Instant Download
Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two)
Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two)A . It creates redundant tunnels between hub-and-spokes, in case failure takes place on the primary links.B . It dynamically assigns cost and weight between the hub and the spokes, based on the...
Based on the exhibits, which statement is correct?
Refer to exhibits. Exhibit A. Exhibit B. Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members. Based on the exhibits, which statement is correct? A. The dead member interface stays unavailable until an administrator manually brings the interface back. B....
What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two)
What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two)A . Specify outgoing interface routing cost.B . Configure SD-WAN rules interface preference.C . Select SD-WAN balancing strategy.D . Specify incoming interfaces in SD-WAN rules.View AnswerAnswer: B,C
Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?
Refer to the exhibit. Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?A . The type of traffic defined and allowed on firewall policy ID 1 is UDC . FortiGate has terminated the session after a change on policy ID 1.D . Changes have been made on...
To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?
Refer to exhibits. Exhibit A. Exhibit B. Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits. To correct this traffic shaping issue on FortiGate, what configuration change must be...
Which two statements about the status of the VPN tunnel are true?
Refer to the exhibit. Which two statements about the status of the VPN tunnel are true? <Choose two)A . There are separate virtual interfaces for each dial-up client.B . VPN static routes are prevented from populating the FortiGate routing table.C . FortiGate created a single IPsec virtual interface that is...
Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule?
Refer to the exhibit. Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)A . Set priority 10.B . Set cost 15.C . Set load-balance-mode source-ip-ip-based.D . Set source 100.64.1.1.View...
Which statement is correct about the SD-WAN and ADVPN?
Which statement is correct about the SD-WAN and ADVPN?A . ADVPN interface can be a member of SD-WAN interface.B . Dynamic VPN is not supported as an SD-Wan interface.C . Spoke support dynamic VPN as a static interface.D . Hub FortiGate is limited to use ADVPN as SD-WAN member interface.View...
Which two statements about the debug output are correct?
Refer to the exhibit. Which two statements about the debug output are correct? (Choose two)A . The debug output shows per-IP shaper values and real-time readings.B . This traffic shaper drops traffic that exceeds the set limits.C . Traffic being controlled by the traffic shaper is under 1 Kbps.D ....
Which CLI command do you use to perform real-time troubleshooting for ADVPN on either a hub or a spoke FortiGate?
Which CLI command do you use to perform real-time troubleshooting for ADVPN on either a hub or a spoke FortiGate?A . diagnose sys virtual-wan-link serviceB . get router info routing-tableC . diagnose debug application ikeD . get ipsec tunnel listView AnswerAnswer: C
