Fortinet NSE7_SDW-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE7_SDW-7.0 Online Questions & Answers

• Question 101:

  Which action FortiGate performs on traffic that is subject to a per-IP traffic shaper of 10 Mbps?

  A. FortiGate shares 10 Mbps of bandwidth equally among all source IP addresses.
  B. FortiGate applies traffic shaping to the original traffic direction only.
  C. FortiGate limits each source IP address to a maximum bandwidth of 10 Mbps.
  D. FortiGate guarantees a minimum of 10 Mbps of bandwidth to each source IP address.
  C. FortiGate limits each source IP address to a maximum bandwidth of 10 Mbps.

• Question 102:

  Which statement reflects how BGP tags work with SD-WAN rules?

  A. BGP tags match the SD-WAN rule based on the order that these rules were installed.
  B. BGP tags require that the adding of static routes be enabled on all ADVPN interfaces
  C. Route tags are used for a BGP community and the SD-WAN rules are assigned the same tag
  D. VPN topologies are formed using only BGP dynamic routing with SD-WAN
  C. Route tags are used for a BGP community and the SD-WAN rules are assigned the same tag

• Question 103:

  What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

  A. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.
  B. It improves SD-WAN performance on the managed FortiGate devices.
  C. It sends probe signals as health checks to the beacon servers on behalf of FortiGate.
  D. It acts as a policy compliance entity to review all managed FortiGate devices.
  E. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.
  A. It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.
  E. It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.

• Question 104:

  Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

  

  What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD- WAN?

  A. You must set ike-version to 1.
  B. You must enable net-device.
  C. You must enable auto-discovery-sender.
  D. You must disable idle-timeout.
  B. You must enable net-device.

• Question 105:

  FortiGate is connected to the internet and is obtaining the IP address on its egress interlace from the DHCP server

  Which statement is due when FortiGate restarts and receives preconfigured settings to install as part of a zero-touch provisioning process?

  A. FortiDeploy connects with FortiGate and provides the initial configuration to contact FortiManager
  B. The zero-touch provisioning process completes internally, behind FortiGate
  C. FortiManager registers FortiGate after the restart and retrieves the existing configuration
  D. The FortiGate cloud key added to the FortiGate cloud portal and FortiGate performs a factory reset before the restart
  A. FortiDeploy connects with FortiGate and provides the initial configuration to contact FortiManager

• Question 106:

  Refer to the exhibits.

  

  

  ExhibitA shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.

  Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

  A. port2 is referenced in a static route.
  B. port1 is assigned a manual IP address.
  C. port1 and port2 are not administratively down.
  D. port1 is referenced in a firewall policy.
  D. port1 is referenced in a firewall policy.

• Question 107:

  Refer to the exhibit.

  

  Based on the output, which two statements are true? (Choose two )

  A. The diagnostic output presents only of the policy routes
  B. The all_rules rule is the implicit SD-WAN rule in place
  C. There is more than one SD-WAN rule configured
  D. At least one policy route is implemented and in effect
  A. The diagnostic output presents only of the policy routes
  C. There is more than one SD-WAN rule configured

• Question 108:

  Refer to the exhibit.

  

  Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

  A. Set priority 10.
  B. Set cost 15.
  C. Set load-balance-mode source-ip-ip-based.
  D. Set source 100.64.1.1.
  A. Set priority 10.
  B. Set cost 15.

  ---

  Explanation/Reference:

• Question 109:

  An administrator is troubleshooting VoIP quality issues that occur when calling external phone numbers The SD-WAN interface on the edge FortiGate is configured with the default settings, and is using two upstream links One link has random jitter and latency issues and is based on a wireless connection

  Which two actions must the administrator apply simultaneously on the edge FortiGate to improve VoIP quality using SD_WAN rules?

  A. Select the corresponding SD-WAN balancing strategy in the SD-WAN rule.
  B. Choose the suitable interface based on the interface cost and weight.
  C. Use the performance SLA targets to detect latency and jitter instantly.
  D. Place the troublesome link at the top of the interface preference list.
  E. Configure an SD-WAN rule to load balance all traffic without VoIP.
  A. Select the corresponding SD-WAN balancing strategy in the SD-WAN rule.
  C. Use the performance SLA targets to detect latency and jitter instantly.

• Question 110:

  Refer to exhibits. Exhibit A.

  

  Exhibit B.

  

  Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members. Based on the exhibits, which statement is correct?

  A. The dead member interface stays unavailable until an administrator manually brings the interface back.
  B. The SLA state of port2 has exceeded three consecutive unanswered requests from the SLA server.
  C. Static routes using port2 are active in the routing table.
  D. FortiGate has not received three consecutive requests from the SLA server configured for port2.
  D. FortiGate has not received three consecutive requests from the SLA server configured for port2.

  ---

  Explanation/Reference: