NSE6_SDW_AD-7.6

NSE6_SDW_AD-7.6 practice questions, page 2 of 3, with answer review and explanations.

Question 6

Refer to the exhibit that shows a diagnose output on a FortiGate device.Based on the output shown in the exhibit, what can you conclude about the device role and how it handles health checks?

  1. The device is a spoke and it provides embedded health-check measures for each tunnel to the hub.
  2. The device is a spoke and it receives health-check measures for the tunnels of another spoke.
  3. The device is a hub and it receives embedded health-check measures for each tunnel from the spoke.
  4. The device is a hub and it receives health-check measures for the tunnels of a spoke.

Question 7

Refer to the exhibits.An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first exhibit.After generating GoToMeeting test traffic, the administrator examined the corresponding traffic log on FortiAnalyzer, which is shown in the second exhibit.The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.Which two reasons explain why some log messages show that the traffic matched the implicit SD-WAN rule? (Choose two.)

  1. No configured SD-WAN rule matches the traffic related to the collaboration application GoToMeeting.
  2. Full SSL inspection is not enabled on the matching firewall policy.
  3. The session 3-tuple did not match any of the existing entries in the ISDB application cache.
  4. FortiGate could not refresh the routing information on the session after the application was detected.

Question 8

Refer to the exhibits.You use FortiManager to configure SD-WAN on three branch devices.When you install the device settings, FortiManager prompts you with the error “Copy Failed” for the device branch1_fgt. When you click the log button, FortiManager displays the message shown in the exhibit.Based on the exhibits, which statement best describes the issue and how you can resolve it?

  1. Check the metadata variable definitions, and review the per-device mapping configuration.
  2. Remove the installation target for the SD-WAN member port4. You cannot combine metadata variable and installation targets.
  3. Gateways for all members in a zone must be defined the same way. Specify the gateway of the SD-WAN member port1 without metadata variables.
  4. Check the connection between branch1_fgt and FortiManager.

Question 9

Refer to the exhibits.You collected the output shown in the exhibits and want to know which interface HTTP traffic will flow through from the user device 10.0.1.101 to the corporate web server 10.0.0.126.All SD-WAN links are stable.Which interface will use FortiGate to steer the traffic?

  1. Either HUB1-VPN1, HUB1-VPN2, or HUB1-VPN3
  2. Only HUB1-VPN3
  3. Only HUB1-VPN2
  4. Either HUB1-VPN2 or HUB1-VPN3

Question 10

As an IT manager, you want to delegate the installation and management of your SD-WAN deployment to a managed security service provider (MSSP).Each site must maintain direct internet access and be secure. You expect significant traffic flow between the sites and want to delegate as much of the network administration and management as possible to the MSSP.Which two MSSP deployment blueprints address your requirements? (Choose two.)

  1. Install the hub and spokes on the customer premises, and enable the MSSP to manage the SD-WAN deployment using FortiManager with a dedicated ADOM.
  2. Use a shared hub on the MSSP premises and a dedicated hub on the customer premises, and install the spokes on the customer premises.
  3. Install a dedicated hub on the MSSP premises for the customer, and install the spokes on the customer premises.
  4. Use a shared hub on the MSSP premises with a dedicated VDOM for the customer, and install the spokes on the customer premises.