Refer to the exhibit. Which two statements about the debug output are correct? (Choose two )
A.
The debug output shows per-IP shaper values and real-time readings.
B.
This traffic shaper drops traffic that exceeds the set limits.
C.
Traffic being controlled by the traffic shaper is under 1 Kbps.
D.
FortiGate provides statistics and reading based on historical traffic logs.
Answer:
AB
User Votes:
A
50%
B
50%
C
50%
D
50%
None
Discussions
0/ 1000
Question 2
Which two reasons make forward error correction (FEC) ideal to enable in a phase one VPN interface? (Choose two )
A.
FEC transmits the original payload in full to recover the error in transmission.
B.
FEC improves reliability which overcomes adverse WAN conditions such as noisy links.
C.
FEC is useful to increase speed at which traffic is routed through IPsec tunnels.
D.
FEC transmits additional packets as redundant data to the remote device.
E.
FEC reduces the stress on the remote device jitter buffer to reconstruct packet loss
Answer:
BD
User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
None
Discussions
0/ 1000
Question 3
Which statement about using BGP routes in SD-WAN is true?
A.
Adding static routes must be enabled on all ADVPN interfaces.
B.
VPN topologies must be form using only BGP dynamic routing with SD-WAN
C.
Learned routes can be used as dynamic destinations in SD-WAN rules
D.
Dynamic routing protocols can be used only with non-encrypted traffic
Answer:
C
User Votes:
A
50%
B
50%
C
50%
D
50%
None
Discussions
0/ 1000
Question 4
Refer to exhibits. Exhibit A shows the performance SLA exhibit B shows the SD-WAN diagnostics output. Based on the exhibits, which statement is correct?
A.
Both SD-WAN member interfaces have used separate SLA targets.
B.
The SLA state of port1 is dead after five unanswered requests by the SLA servers.
C.
Port1 became dead 1ecause no traffic was offload through the egress of port1.
D.
SD-WAN member interfaces are affected by the SLA state of the inactive interface
Answer:
B
User Votes:
A
50%
B
50%
C
50%
D
50%
None
Discussions
0/ 1000
Question 5
Which diagnostic command can you use to show the SD-WAN rules interface information and state?
Refer to exhibits. Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy. The traffic shaping policy is being applied to all outbound traffic; however, inbound traffic is not being evaluated by the shaping policy. Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?
A.
The reverse shaper option must be enabled and a traffic shaper must be selected
B.
The guaranteed-10mbps option must be selected as the reverse shaper option.
C.
A new firewall policy must be created and SD-WAN must be selected as the incoming interface.
D.
The guaranteed-10mbps option must be selected as the per-IP shaper option
Answer:
B
User Votes:
A
50%
B
50%
C
50%
D
50%
None
Discussions
0/ 1000
Question 10
What are the two minimum configuration requirements for an outgoing interface to be selected once the SD-WAN logical interface is enabled? (Choose two )
A.
Specify outgoing interface routing cost.
B.
Configure SD-WAN rules interface preference.
C.
Select SD-WAN balancing strategy.
D.
Specify incoming interfaces in SD-WAN rules.
Answer:
AB
User Votes:
A
50%
B
50%
C
50%
D
50%
None
Discussions
0/ 1000
Question 11
What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?
A.
Per-IP shaping mode
B.
Reverse policy shaping mode
C.
Interface-based shaping mode
D.
Shared policy shaping mode
Answer:
D
User Votes:
A
50%
B
50%
C
50%
D
50%
None
Discussions
0/ 1000
Pingdude
11 months, 3 weeks ago
The answer is C
Question 12
Refer to exhibits. Exhibit A. Exhibit B. Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members. Based on the exhibits, which statement is correct?
A.
The dead member interface stays unavailable until an administrator manually brings the interface back.
B.
The SLA state of port2 has exceeded three consecutive unanswered requests from the SLA server.
C.
Port2 needs to wait 500 milliseconds to change the status from alive to dead.
D.
Check interval is the time to wait before a packet sent by a member interface considered as lost.
Answer:
B
User Votes:
A
50%
B
50%
C
50%
D
50%
None
Discussions
0/ 1000
Question 13
Refer to the exhibit. Which statement about the command route-tag in the SD-WAN rule is true?
A.
It enables the SD-WAN rule to load balance and assign traffic with a route tag
B.
It tags each route and references the tag in the routing table.
C.
It uses route tags for a BGP community and assigns the SD-WAN rules with same tag.
D.
It ensures route tags match the SD-WAN rule based on the rule order
Answer:
D
User Votes:
A
50%
B
50%
C
50%
D
50%
None
Discussions
0/ 1000
Question 14
An administrator is troubleshooting VoIP quality issues that occur when calling external phone numbers The SD-WAN interface on the edge FortiGate is configured with the default settings, and is using two upstream links One link has random jitter and latency issues and is based on a wireless connection Which two actions must the administrator apply simultaneously on the edge FortiGate to improve VoIP quality using SD_WAN rules?
A.
Select the corresponding SD-WAN balancing strategy in the SD-WAN rule.
B.
Choose the suitable interface based on the interface cost and weight.
C.
Use the performance SLA targets to detect latency and jitter instantly.
D.
Place the troublesome link at the top of the interface preference list.
E.
Configure an SD-WAN rule to load balance all traffic without VoIP.
Answer:
AC
User Votes:
A
50%
B
50%
C
50%
D
50%
E
50%
None
Discussions
0/ 1000
Question 15
Refer to the exhibit. What must you configure to enable ADVPN?
A.
On the hub VPN, only the device needs additional phase one sett
B.
ADVPN should only be enabled on unmanaged FortiGate devices.
C.
Each VPN device has a unique pre-shared key configured separately on phase one
D.
The protected subnets should be set to address object to all (0.0 .0. o/o).