Exact2Pass
Refer to the exhibit.
Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules?
Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)
What are two benefits of using the Internet service database (ISDB) in an SD-WAN rule? (Choose two.)
Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)
Which SD-WAN setting enables FortiGate to delay the recovery of ADVPN shortcuts?
Refer to the exhibit.
An administrator used the SD-WAN overlay template to prepare an IPsec configuration for a hub-and-spoke SD-WAN topology. The exhibit shows the installation preview for one FortiGate device. In the exhibit, which statement best describes the configuration applied to the FortiGate device?
Exhibit B –
Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?
What are two advantages of using an IPsec recommended template to configure an IPsec tunnel in an hub-and-spoke topology? (Choose two.)
Which diagnostic command can you use to show the configured SD-WAN zones and their assigned members?
What are two common use cases for remote internet access (RIA)? (Choose two.)
Which two statements are true about using SD-WAN to steer local-out traffic? (Choose two.)
Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two.)
Refer to the exhibit.
Based on the output, which two conclusions are true? (Choose two.)
Refer to the exhibit.
Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?
What three characteristics apply to provisioning templates available on FortiManager? (Choose three.)
Refer to the exhibits.
Exhibit A shows two IPsec templates to define Branch_IPsec_1 and Branch_IPsec_2. Each template defines a VPN tunnel.
Exhibit B shows the error message that FortiManager displayed when the administrator tried to assign the second template to the FortiGate device.
Which statement best explain the cause for this issue?
Which two statements about SD-WAN central management are true? (Choose two.)
Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?
Which diagnostic command can you use to show the member utilization statistics measured by performance SLAs for the last 10 minutes?
Refer to the exhibits.
Exhibit A shows the packet duplication rule configuration, the SD-WAN zone status output, and the sniffer output on FortiGate acting as the sender. Exhibit B shows the sniffer output on a FortiGate acting as the receiver.
The administrator configured packet duplication on both FortiGate devices. The sniffer output on the sender FortiGate shows that FortiGate forwards an ICMP echo request packet over three overlays, but it only receives one reply packet through T_INET_1_0.
Based on the output shown in the exhibits, which two reasons can cause the observed behavior? (Choose two.)
What are two benefits of using forward error correction (FEC) in IPsec VPNs? (Choose two.)
Refer to the exhibit.
FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.
Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)