30 Questions
Which version of IKE is supported by the network ID feature?
IKE-v2
What is the purpose of setting a network ID on each overlay in a VPN configuration?
To allow the spokes to establish shortcuts between the same pair of local and remote gateway IP-addresses
What is traffic shaping?
A technique to adjust bandwidth limits and prioritisation
Which of the following is NOT a technique that can be used to implement QoS?
Packet dropping
What is the purpose of implementing QoS?
To improve the performance and stability of all types of traffic
What does traffic policing do?
Drops packets that do not conform to bandwidth limitations
What does traffic shaping consist of?
A mixture of traffic policing and priority queue adjustment
What does queuing ensure?
That packets are transmitted in order of their assigned priority queue
What is the benefit of setting a different network ID for each overlay in a VPN configuration?
To establish shortcuts between different pairs of local and remote gateway IP-addresses
What is the purpose of bandwidth adjustment in traffic shaping?
To assist packets in achieving the guaranteed rate
Which of the following is true about idle shortcuts in FortiGate?
Idle shortcuts inherit lifetime settings from their parent tunnels.
What can be done to save resources when dealing with idle shortcuts in FortiGate?
Set an idle timer for shortcuts.
Which type of configuration is recommended for SD-WAN + AD-VPN + lowest cost SLA, rules deployments?
Default configuration
What is the purpose of configuring an idle timeout for shortcuts in FortiGate?
To reduce unnecessary resource utilization on spokes.
What happens if a member does not meet the SLA target in a lowest cost SLA rule?
It is considered out of SLA and placed at the bottom of the outgoing interface list
Which of the following is considered as user traffic in FortiGate?
Forwarding user traffic.
What can happen to links impacted by brownout conditions?
They will switch in and out of SLA states in short periods of time
What happens if an idle shortcut is not used for forwarding user traffic in FortiGate?
FortiGate brings down the idle shortcut.
What is the purpose of configuring the hold-down-time setting on an SD-WAN rule?
To prevent immediate failback to a recovered member
How long does the example configuration set as the idle timeout for shortcuts in FortiGate?
Five minutes.
What is the default value of the hold-down-time setting?
0
What is the purpose of delaying failback to recovered members in FortiGate?
To prevent impact to sensitive applications during brownout conditions and SLA changes.
What is the impact of session re-evaluation on CPU usage in FortiGate?
It increases CPU usage.
What is the default behavior of shortcuts when their parent tunnel goes down?
Shortcuts remain up
What can be done to bring down shortcuts immediately after their parent tunnel goes down?
Configure the auto-discovery-shortcuts to be dependent
What is the purpose of hold-down-time in FortiGate?
To delay the use of recovered members, including shortcuts.
What happens when there are multiple shortcuts established between the same pair of gateways?
The first shortcut established remains up
What is the impact of delaying failback to recovered members in FortiGate?
It provides more accurate monitoring.
What is the default behavior of shortcut lifetime in relation to parent tunnels?
Shortcut lifetime is independent of parent tunnels
What can be done to allow multiple overlapping shortcuts between the same pair of gateways?
Assign different network IDs to overlays
Test your knowledge on how to optimize resource usage by setting idle timers for shortcuts. Learn how FortiGate brings down idle shortcuts and how to configure the idle timer for specific interfaces. Get ready to improve your network efficiency!
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
