NSE 7 SDWAN ALL SOLUTION 2023/2024 EDITION QUESTIONS AND CORRECT ANSWERS.

NSE 7 SDWAN ALL SOLUTION 2023/2024 EDITION QUESTIONS AND CORRECT ANSWERS. What is SDWAN (3) A virtual interface consisting of a group of member interfaces that can be connected to different link types Allows effective WAN usage with various load balancing algorithms Supports link quality measurement How does SDWn simplify configurations Admin can configure a single set of routes and firewall policies and apply them to all member interfaces Main motivator for deploying SDWAN WAN use when using multiple WAN links What feature is essential for SDWAN (how to know if link is down) link quality measurements What is adding a model device in fortimanager and SDWAN orchestrator Adding an offline fortigate by it's serial number Link quality measurements Using Ping or HTTP echo fortigate can determine the latency Jitter, or packet loss percentage for each link and dynamically select links based on these measurements SDWAN configuration components (5) main (10 subtypes) SDWAN - interfaces rules SLA Routing - static BGP Security - policies and profiles VPN - IPSec tunnels QoS - traffic shapers, policy, profile What four components overal make up the fortinet secure SDWAN solution Fortigate Fortimanager Fortianalyzer Fortideploy What two components does secure SDWAN encompass NSE 7 SDWAN ALL SOLUTION 2023/24 EDITION SDWAN (SDWAN, QoS, VPN) + NGFW (app control IPS AV URL sandboxing ssl inspection) Five advanced SDWAN features the fortigate offers 1) application aware - visibility into 3000+ apps and app level transaction for better SLA 2) multi path intelligence - Dynamic WAN link selection using SLA strategies and automated failover capabilities 3) multi broadband supported - Transport Independent with support for Ethernet 3G/4G and aggregates multiple interfaces into single interface 4) simplified monitoringHigh level monitoring of SDWAN devices on a map and detailed application monitoring 5) certified security - most verified security such as NSS labs and high performance security processor technology Application aware sdwan 1) application aware - visibility into 3000+ apps and app level transaction for better SLA Multi path intelligence SDWAN 2) multi path intelligence - Dynamic WAN link selection using SLA strategies and automated failover capabilities Multi broadband supported sdwan 3) multi broadband supported - Transport Independent with support for Ethernet 3G/4G and aggregates multiple interfaces into single interface Simplified monitoring SDWAN 4) simplified monitoringHigh level monitoring of SDWAN devices on a map and detailed application monitoring Certified security SDWAN 5) certified security - most verified security such as NSS labs and high performance security processor technology How does SDWAN allow you to control application performance Using rules and performance SLAs that route traffic based on quality type What are the measurement techniques for SLA (5) Ping Http TCP echo UDP echo TWAMP Failover parameters for SLA (3) Check interval Failure before inactive Success before restore What makes fortinet SDWAN ultrafast (app identification and steering) SOC4 chip SDWAN ASIC specs A53 quad @ 1.4ghz DDR4-32B @ 2400 28,000 DMPS 18x network ports 36 GBPS throughput 18 GBPS IPSec throughput CAPWAP support Legacy MPLS (pic) SDWAN use case #1 SDWAN use case #2 SDWAN use case #3 How many member interfaces need to be specified for SDWAN interface At least 2 Why should you configure SDWAN early Because you cannot use a member interface if the interface is referenced by a firewall policy or static route What type of interfaces does SDWAN support (4+) Physical VLAN Aggregate IPSec interfaces Others What things must be specified under an SDWAN interface (2) Member and it's associated gateway What is automatically generated when you enabled SDWAN An implicit rule designed to balance the traffic among all the available SDWAN member links based on source IP SDWAN load balancing methods (5) what is default Source IP (default) - sessions from the same source IP address use the same interface Source destination IP - sessions with the same source and destination IP pair use the same interface Spillover - use one interface until the threshold is reached then use the next Sessions - sessions will be distributed based on weights assigned on the interfaces Volume - sessions are distributed so the traffic volume is distributed by the interface weights Source ip based load balancing All traffic from a source ip is sent to the same interface Weight based load balancing Sessions Interfaces with higher weights have a higher priority and get more traffic Usage based load balancing Spillover All traffic is sent to the first interface on the list. When the bandwidth on that interface exceeds the spillover limit the new traffic is sent to the next interface Source-dest-IP-based load balancing Source and destination IP All traffic from a source IP to a destination IP is sent to the same interface Measured volume based load balancing Volume based Sessions are load balanced based on traffic volume in bytes. More traffic is sent to interfaces with higher volume ratios Command to set load balance mode on CLI Config system virtual-wan-link Set load-balance-mode <load balance mode> Source-ip-based Weight-based Usage-based Source-dest-ip-based Measured-volume-based What rule is the load balancing algorithm configured on The implicit rule Which load balancing methods use weights configured on each SDWAN member Session and volume based In a session based load balancing algorithm weighted distribution is based on the number of ____on each SDWAN member Sessions In a volume based load balancing algorithm weighted distribution is based on ____ ____ of ____ across each member. Cumulative number of bytes Range for the weight for volume and session based load balancing on a member 1-255 Interface weight on an SDWAN member only applies to ____ ____ Static routing.