Fortinet NSE7_SDW-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE7_SDW-7.0 Online Questions & Answers

• Question 81:

  Refer to the exhibit.

  

  Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

  A. Set priority 10.
  B. Set cost 15.
  C. Set load-balance-mode source-ip-ip-based.
  D. Set source 100.64.1.1.
  A. Set priority 10.
  B. Set cost 15.

• Question 82:

  Refer to exhibits.

  Exhibit A.

  

  Exhibit B.

  

  Exhibit A shows the traffic shaping policy and exhibit B show: the firewall policy

  FortiGate is not performing traffic shaping as expected basi on the policies shown in the exhibits.

  To correct this traffic shaping issue on FortiGate, what configuration change must be made on which policy?

  A. The shaper mode must be applied per-IP shaper on the traffic shaping policy
  B. The application control profile must be enabled on the firewall policy.
  C. The web filter profile must be enabled on the firewall policy
  D. The URL category must be specified on the traffic shaping policy
  C. The web filter profile must be enabled on the firewall policy

  ---

  Explanation/Reference:

  SD-WAN_6.4_Study_Guide page 131

• Question 83:

  Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

  A. diagnose sys virtual-wan-link health-check
  B. diagnose sys virtual-wan-link log
  C. diagnose sys virtual-wan-link sla-log
  D. diagnose sys virtual-wan-link intf-sla-log
  C. diagnose sys virtual-wan-link sla-log

  ---

  Explanation/Reference:

  Reference: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/943037/sla-logging https://community.fortinet.com/t5/FortiGate/Technical-Tip-SLA-Logging/ta-p/190934

• Question 84:

  In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

  A. Traffic has matched none of the FortiGate policy routes.
  B. Matched traffic failed RPF and was caught by the rule.
  C. The FIB lookup resolved interface was the SD-WAN interface.
  D. An absolute SD-WAN rule was defined and matched traffic.
  A. Traffic has matched none of the FortiGate policy routes.
  C. The FIB lookup resolved interface was the SD-WAN interface.

• Question 85:

  Which feature enables SD-WAN to combine IPsec VPN dynamic shortcut tunnels between spokes and a static tunnel to the hub?

  A. ADVPN
  B. GRE
  C. SSLVPN
  D. OCVPN
  A. ADVPN

• Question 86:

  Which components make up the secure SD-WAN solution?

  A. Application, antivirus, and URL, and SSL inspection
  B. Datacenter, branch offices, and public cloud
  C. FortiGate, FortiManager, FortiAnalyzer, and FortiDeploy
  D. Telephone, ISDN, and telecom network.
  C. FortiGate, FortiManager, FortiAnalyzer, and FortiDeploy

• Question 87:

  Refer to the exhibit.

  

  Which conclusion about the packet debug flow output is correct?

  A. The original traffic exceeded the maximum bandwidth of the outgoing interface, and the packet was dropped.
  B. The reply traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
  C. The original traffic exceeded the maximum packets per second of the outgoing interface, and the packet was dropped.
  D. The original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
  D. The original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.

• Question 88:

  Refer to the exhibit.

  

  An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects the traffic to match SD-WAN rule ID 1 and be routed over T_INET_0_0. However, the traffic is routed over T_INET_1_0.

  Based on the output shown in the exhibit, which two reasons can cause the observed behavior? (Choose two.)

  A. The traffic matches a regular policy route configured with T_INET_1_0 as the outgoing device.
  B. T_INET_1_0 has a lower route priority value (higher priority) than T_INET_0_0.
  C. T_INET_0_0 does not have a valid route to the destination.
  D. T_INET_1_0 has a higher member configuration priority than T_INET_0_0.
  A. The traffic matches a regular policy route configured with T_INET_1_0 as the outgoing device.
  C. T_INET_0_0 does not have a valid route to the destination.

• Question 89:

  Refer to the exhibits.

  

  

  Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member and the static routes configuration. If port2 is detected dead by FortiGate, which expected behavior is correct?

  A. Port2 becomes alive after one successful probe is detected.
  B. The SD-WAN interface becomes disabled and port1 becomes the WAN interface.
  C. Dead members require manual administrator access to bring them back alive.
  D. Subnets 10.0.20.0/23 and 172.20.0.0/16 are reachable only through port1.
  D. Subnets 10.0.20.0/23 and 172.20.0.0/16 are reachable only through port1.

• Question 90:

  Which diagnostic command can you use to show the member utilization statistics measured by performance SLAs for the last 10 minutes?

  A. diagnose sys sdwan intf-sla-log
  B. diagnose sys sdwan health-check
  C. diagnose sys sdwan log
  D. diagnose sys sdwan sla-log
  A. diagnose sys sdwan intf-sla-log

  ---

  Explanation/Reference: