Fortinet NSE7_SDW-7.2 Online Practice Questions and Exam Preparation

Fortinet NSE7_SDW-7.2 Online Questions & Answers

• Question 61:

  Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.

  

  Based on the exhibit, which statement is true?

  A. You can delete the virtual-wan-link zone because it contains no member.
  B. The corporate zone contains no member.
  C. You can move port1 from the underlay zone to the overlay zone.
  D. The overlay zone contains four members.
  C. You can move port1 from the underlay zone to the overlay zone.

• Question 62:

  Which are three key routing principles in SD-WAN? (Choose three.)

  A. FortiGate performs route lookups for new sessions only.
  B. Regular policy routes have precedence over SD-WAN rules.
  C. SD-WAN rules have precedence over ISDB routes.
  D. By default, SD-WAN members are skipped if they do not have a valid route to the destination.
  E. By default, SD-WAN rules are skipped if the best route to the destination is not an SD- WAN member.
  B. Regular policy routes have precedence over SD-WAN rules.
  D. By default, SD-WAN members are skipped if they do not have a valid route to the destination.
  E. By default, SD-WAN rules are skipped if the best route to the destination is not an SD- WAN member.

• Question 63:

  The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks. What are three mandatory post-run tasks that must be performed? (Choose three.)

  A. Assign an sdwan_id metadata variable to each device (branch and hub).
  B. Assign a branch_id metadata variable to each branch device.
  C. Create policy packages for branch devices.
  D. Configure SD-WAN rules.
  E. Configure routing through overlay tunnels created by the SD-WAN overlay template.
  B. Assign a branch_id metadata variable to each branch device.
  C. Create policy packages for branch devices.
  D. Configure SD-WAN rules.

• Question 64:

  Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)

  A. update-source
  B. set-route-tag
  C. holdtime-timer
  D. link-down-failover
  C. holdtime-timer
  D. link-down-failover

• Question 65:

  Refer to the exhibits.

  

  An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in exhibit A.

  After generating GoToMeeting test traffic, the administrator examined the respective traffic log on FortiAnalyzer, which is shown in exhibit B. The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.

  Which two reasons explain why the traffic matched the implicit SD-WAN rule? (Choose two.)

  A. FortiGate did not refresh the routing information on the session after the application was detected.
  B. Port1 and port2 do not have a valid route to the destination.
  C. Full SSL inspection is not enabled on the matching firewall policy.
  D. The session 3-tuple did not match any of the existing entries in the ISDB application cache.
  B. Port1 and port2 do not have a valid route to the destination.
  C. Full SSL inspection is not enabled on the matching firewall policy.

• Question 66:

  Which are two benefits of using CLI templates in FortiManager? (Choose two.)

  A. You can reference meta fields.
  B. You can configure interfaces as SD-WAN members without having to remove references first.
  C. You can configure FortiManager to sync local configuration changes made on the managed device, to the CLI template.
  D. You can configure advanced CLI settings.
  A. You can reference meta fields.
  D. You can configure advanced CLI settings.

• Question 67:

  Which two statements about SD-WAN central management are true? (Choose two.)

  A. The objects are saved in the ADOM common object database.
  B. It does not support meta fields.
  C. It uses templates to configure SD-WAN on managed devices.
  D. It supports normalized interfaces for SD-WAN member configuration.
  A. The objects are saved in the ADOM common object database.
  C. It uses templates to configure SD-WAN on managed devices.

• Question 68:

  Which SD-WAN setting enables FortiGate to delay the recovery of ADVPN shortcuts?

  A. hold-down-time
  B. link-down-failover
  C. auto-discovery-shortcuts
  D. idle-timeout
  A. hold-down-time

• Question 69:

  Which statement about using BGP routes in SD-WAN is true?

  A. Learned routes can be used as dynamic destinations in SD-WAN rules.
  B. You must use BGP to route traffic for both overlay and underlay links.
  C. You must configure AS path prepending.
  D. You must use external BGP.
  A. Learned routes can be used as dynamic destinations in SD-WAN rules.

• Question 70:

  Refer to the exhibit.

  

  Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

  A. Set priority 10.
  B. Set cost 15.
  C. Set load-balance-mode source-ip-ip-based.
  D. Set source 100.64.1.1.
  A. Set priority 10.
  B. Set cost 15.