QUESTION 20
Which statement defines how a per-IP traffic shaper of 10 Mbps is applied to the entire network?

QUESTION 21
Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

QUESTION 22
Refer to the exhibit.
Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2 The administrator configured ADVPN on the dual regions topology

Which two statements are correct if a user in Toronto sends traffic to London? (Choose two )

QUESTION 23
Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

QUESTION 24
Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

QUESTION 25
Refer to exhibits


Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate Based on the FortiGate configuration shown in the exhibits, what are two issues you might encounter when creating an SD-WAN interface on port1 and port2? {Choose two )

QUESTION 26
Refer to the exhibit.

Based on output shown in the exhibit, which two commands can be used by SD-WAN rules? (Choose two.)

QUESTION 27
Refer to the exhibit.

FortiGate has multiple dial-up VPN interfaces incoming on portl that match only FIRSTJVPN.
Which two configuration changes must be made to both IPsec
VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two )

QUESTION 28
Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

QUESTION 29
Refer to exhibits.
Exhibit A.

Exhibit B.

Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SO-WAN interface and the static routes configuration.
Port1 and port2 are member interfaces of the SD-WAN, and port2 becomes a dead member after reaching the failure thresholds Which statement about the dead member is correct?

QUESTION 30
An administrator is troubleshooting VoIP quality issues that occur when calling external phone numbers. The SD-WAN interface on the edge FortiGate is configured with the default settings, and is using two upstream links. One link has random jitter and latency issues, and is based on a wireless connection.
Which two actions must the administrator apply simultaneously on the edge FortiGate to improve VoIP quality using SD-WAN rules? (Choose two.)

QUESTION 31
Refer to exhibits.


Exhibit A shows the performance SLA exhibit B shows the SD-WAN diagnostics output.
Based on the exhibits, which statement is correct?

QUESTION 32
What are two benefits of using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

QUESTION 33
Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

QUESTION 34
In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

QUESTION 35
Which CLI command do you use to perform real-time troubleshooting for ADVPN on either a hub or a spoke FortiGate?

QUESTION 36
Refer to the exhibit.

What must you configure to enable ADVPN?

QUESTION 37
Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two )

QUESTION 38
Refer to exhibits.


Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)

QUESTION 39
Which statement about using BGP routes in SD-WAN is true?

QUESTION 40
Refer to exhibits.


Exhibit A shows the performance SLA exhibit B shows the SD-WAN diagnostics output.
Based on the exhibits, which statement is correct?