Optimizing Resource Usage

Which version of IKE is supported by the network ID feature?

IKE-v4
IKE-v3
IKE-v2 (correct)
IKE-v1

What is the purpose of setting a network ID on each overlay in a VPN configuration?

To improve the performance and stability of network applications
To prioritize certain flows over others
To allow the spokes to establish shortcuts between the same pair of local and remote gateway IP-addresses (correct)
To establish shortcuts between different pairs of local and remote gateway IP-addresses

What is traffic shaping?

A technique to prioritise specific traffic over other traffic
A technique to drop packets that do not conform to bandwidth limitations
A technique to adjust bandwidth limits and prioritisation (correct)
A technique to normalise traffic peaks and bursts

Which of the following is NOT a technique that can be used to implement QoS?

Packet dropping (B) Signup and view all the answers

What is the purpose of implementing QoS?

To improve the performance and stability of all types of traffic (B) Signup and view all the answers

What does traffic policing do?

Drops packets that do not conform to bandwidth limitations (C) Signup and view all the answers

What does traffic shaping consist of?

A mixture of traffic policing and priority queue adjustment (B) Signup and view all the answers

What does queuing ensure?

That packets are transmitted in order of their assigned priority queue (A) Signup and view all the answers

What is the benefit of setting a different network ID for each overlay in a VPN configuration?

To establish shortcuts between different pairs of local and remote gateway IP-addresses (A) Signup and view all the answers

What is the purpose of bandwidth adjustment in traffic shaping?

To assist packets in achieving the guaranteed rate (C) Signup and view all the answers

Which of the following is true about idle shortcuts in FortiGate?

Idle shortcuts inherit lifetime settings from their parent tunnels. (D) Signup and view all the answers

What can be done to save resources when dealing with idle shortcuts in FortiGate?

Set an idle timer for shortcuts. (A) Signup and view all the answers

Which type of configuration is recommended for SD-WAN + AD-VPN + lowest cost SLA, rules deployments?

Default configuration (C) Signup and view all the answers

What is the purpose of configuring an idle timeout for shortcuts in FortiGate?

To reduce unnecessary resource utilization on spokes. (A) Signup and view all the answers

What happens if a member does not meet the SLA target in a lowest cost SLA rule?

It is considered out of SLA and placed at the bottom of the outgoing interface list (C) Signup and view all the answers

Which of the following is considered as user traffic in FortiGate?

Forwarding user traffic. (A) Signup and view all the answers

What can happen to links impacted by brownout conditions?

They will switch in and out of SLA states in short periods of time (C) Signup and view all the answers

What happens if an idle shortcut is not used for forwarding user traffic in FortiGate?

FortiGate brings down the idle shortcut. (D) Signup and view all the answers

What is the purpose of configuring the hold-down-time setting on an SD-WAN rule?

To prevent immediate failback to a recovered member (B) Signup and view all the answers

How long does the example configuration set as the idle timeout for shortcuts in FortiGate?

Five minutes. (C) Signup and view all the answers

What is the default value of the hold-down-time setting?

0 (C) Signup and view all the answers

What is the purpose of delaying failback to recovered members in FortiGate?

To prevent impact to sensitive applications during brownout conditions and SLA changes. (D) Signup and view all the answers

What is the impact of session re-evaluation on CPU usage in FortiGate?

It increases CPU usage. (C) Signup and view all the answers

What is the default behavior of shortcuts when their parent tunnel goes down?

Shortcuts remain up (D) Signup and view all the answers

What can be done to bring down shortcuts immediately after their parent tunnel goes down?

Configure the auto-discovery-shortcuts to be dependent (B) Signup and view all the answers

What is the purpose of hold-down-time in FortiGate?

To delay the use of recovered members, including shortcuts. (C) Signup and view all the answers

What happens when there are multiple shortcuts established between the same pair of gateways?

The first shortcut established remains up (B) Signup and view all the answers

What is the impact of delaying failback to recovered members in FortiGate?

It provides more accurate monitoring. (C) Signup and view all the answers

What is the default behavior of shortcut lifetime in relation to parent tunnels?

Shortcut lifetime is independent of parent tunnels (A) Signup and view all the answers

What can be done to allow multiple overlapping shortcuts between the same pair of gateways?

Assign different network IDs to overlays (A) Signup and view all the answers