Fortinet NSE7_SDW-7.2 Online Practice Questions and Exam Preparation

Fortinet NSE7_SDW-7.2 Online Questions & Answers

• Question 1:

  Which statement is correct about SD-WAN and ADVPN?

  A. Routes for ADVPN shortcuts must be manually configured.
  B. SD-WAN can steer traffic to ADVPN shortcuts, established over IPsec overlays, configured as SD-WAN members.
  C. SD-WAN does not monitor the health and performance of ADVPN shortcuts.
  D. You must use IKEv2 on IPsec tunnels.
  B. SD-WAN can steer traffic to ADVPN shortcuts, established over IPsec overlays, configured as SD-WAN members.

• Question 2:

  Refer to the exhibits. Exhibit A

  

  Exhibit B

  

  Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member status, the routing table, and the performance SLA status.

  If port2 is detected dead by FortiGate, what is the expected behavior?

  A. Port2 becomes alive after three successful probes are detected.
  B. FortiGate removes all static routes for port2.
  C. The administrator manually restores the static routes for port2, if port2 becomes alive.
  D. Host 8.8.8.8 is reachable through port1 and port2.
  B. FortiGate removes all static routes for port2.

• Question 3:

  Refer to the exhibits. Exhibit A

  

  Exhibit B

  

  Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status.

  The administrator wants to understand the expected behavior for traffic matching the SD- WAN rule.

  Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

  A. The traffic will be load balanced across all three overlays.
  B. The traffic will be routed over T_INET_0_0.
  C. The traffic will be routed over T_MPLS_0.
  D. The traffic will be routed over T_INET_1_0.
  D. The traffic will be routed over T_INET_1_0.

• Question 4:

  Refer to the exhibits.

  

  

  Exhibit A shows the SD-WAN rule status and the learned BGP routes with community 65000:10.

  Exhibit B shows the SD-WAN rule configuration, the BGP neighbor configuration, and the route map configuration.

  The administrator wants to steer corporate traffic using routes tags in the SD-WAN rule ID 1.

  However, the administrator observes that the corporate traffic does not match the SD-WAN rule ID 1.

  Based on the exhibits, which configuration change is required to fix issue?

  A. In the dc1-lan-rm route map configuration, set set-route-tag to 10.
  B. In SD-WAN rule ID 1, change the destination to use ISDB entries.
  C. In the dc1-lan-rm route map configuration, unset match-community.
  D. In the BGP neighbor configuration, apply the route map dc1-lan-rm in the outbound direction.
  A. In the dc1-lan-rm route map configuration, set set-route-tag to 10.

• Question 5:

  Refer to the exhibit.

  

  Which conclusion about the packet debug flow output is correct?

  A. The original traffic exceeded the maximum packets per second of the outgoing interface, and the packet was dropped.
  B. The reply traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
  C. The original traffic exceeded the maximum bandwidth of the outgoing interface, and the packet was dropped.
  D. The original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
  D. The original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.

• Question 6:

  Refer to the exhibit.

  

  Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

  A. FortiGate does not install IPsec static routes for remote protected networks in the routing table.
  B. The phase 1 configuration supports the network-overlay setting.
  C. FortiGate facilitated the negotiation of the T_INET_1_0_0 ADVPN shortcut over T_INET_1_0.
  D. Dead peer detection is disabled.
  A. FortiGate does not install IPsec static routes for remote protected networks in the routing table.
  B. The phase 1 configuration supports the network-overlay setting.

• Question 7:

  Exhibit.

  

  The exhibit shows the output of the command diagnose sys sdwan health-check status collected on a FortiGate device. Which two statements are correct about the health check status on this FortiGate device? (Choose two.)

  A. The health-check VPN_PING orders the members according to the lowest jitter.
  B. The interface T_INET_1 missed one SLA target.
  C. There is no SLA criteria configured for the health-check Level3_DNS.
  D. The interface T_INET_0 missed three SLA targets.
  A. The health-check VPN_PING orders the members according to the lowest jitter.
  C. There is no SLA criteria configured for the health-check Level3_DNS.

• Question 8:

  In which SD-WAN template field can you use a metadata variable?

  A. You can use metadata variables only to define interface members and the gateway IP.
  B. All SD-WAN template fields support metadata variables.
  C. Any field Identified with a dollar sign ($) in a magnifying glass.
  D. Any field identified with an "M" in a circle.
  C. Any field Identified with a dollar sign ($) in a magnifying glass.

• Question 9:

  Which two statements about the SD-WAN zone configuration are true? (Choose two.)

  A. Theservice-sla-tie-breaksetting enables you to configure preferred member selection based on the best route to the destination.
  B. You can delete the default zones.
  C. The default zones are virtual-wan-link and SASE.
  D. An SD-WAN member can belong to two or more zones.
  A. Theservice-sla-tie-breaksetting enables you to configure preferred member selection based on the best route to the destination.
  C. The default zones are virtual-wan-link and SASE.

• Question 10:

  What is the route-tag setting in an SD-WAN rule used for?

  A. To indicate the routes for health check probes.
  B. To indicate the destination of a rule based on learned BGP prefixes.
  C. To indicate the routes that can be used for routing SD-WAN traffic.
  D. To indicate the members that can be used to route SD-WAN traffic.
  B. To indicate the destination of a rule based on learned BGP prefixes.