Fortinet NSE7_SDW-7.2 Online Practice Questions and Exam Preparation

Fortinet NSE7_SDW-7.2 Online Questions & Answers

• Question 81:

  What is a benefit of using application steering in SD-WAN?

  A. The traffic always skips the regular policy routes.
  B. You steer traffic based on the detected application.
  C. You do not need to enable SSL inspection.
  D. You do not need to configure firewall policies that accept the SD-WAN traffic.
  B. You steer traffic based on the detected application.

• Question 82:

  In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

  A. Traffic has matched none of the FortiGate policy routes.
  B. Matched traffic failed RPF and was caught by the rule.
  C. The FIB lookup resolved interface was the SD-WAN interface.
  D. An absolute SD-WAN rule was defined and matched traffic.
  A. Traffic has matched none of the FortiGate policy routes.
  C. The FIB lookup resolved interface was the SD-WAN interface.

• Question 83:

  Refer to the exhibit.

  

  Which two SD-WAN template member settings support the use of FortiManager meta fields? (Choose two.)

  A. Cost
  B. Interface member
  C. Priority
  D. Gateway IP
  B. Interface member
  D. Gateway IP

• Question 84:

  Refer to the exhibit.

  

  The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate appliance that supports hardware offloading. Based on the information shown in the exhibits, which two statements about the session are true? (Choose two.)

  A. The reply direction of the asymmetric traffic flows from port2 to port3.
  B. The auxiliary session can be offloaded to hardware.
  C. The original direction of the symmetric traffic flows from port3 to port2.
  D. The main session cannot be offloaded to hardware.
  A. The reply direction of the asymmetric traffic flows from port2 to port3.
  B. The auxiliary session can be offloaded to hardware.

• Question 85:

  Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)

  A. Encapsulating Security Payload (ESP)
  B. Secure Shell (SSH)
  C. Internet Key Exchange (IKE)
  D. Security Association (SA)
  A. Encapsulating Security Payload (ESP)
  C. Internet Key Exchange (IKE)

• Question 86:

  Refer to the exhibits. Exhibit A

  

  Exhibit B

  

  Exhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration. Based on the exhibits, which two statements are correct? (Choose two.)

  A. FortiGate updated the outgoing interface list on the rule so it prefers port2.
  B. Port2 has the highest member priority.
  C. Port2 has a lower latency than port1.
  D. SD-WAN rule ID 1 is set to lowest cost (SLA) mode.
  A. FortiGate updated the outgoing interface list on the rule so it prefers port2.
  C. Port2 has a lower latency than port1.

• Question 87:

  Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

  

  What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD- WAN?

  A. You must set ike-version to 1.
  B. You must enable net-device.
  C. You must enable auto-discovery-sender.
  D. You must disable idle-timeout.
  B. You must enable net-device.

• Question 88:

  Refer to the exhibit.

  

  In a dual-hub hub-and-spoke SD-WAN deployment, which is a benefit of disabling theanti- replaysetting on the hubs?

  A. It instructs the hub to disable the reordering of TCP packets on behalf of the receiver, to improve performance.
  B. It instructs the hub to disable TCP sequence number check, which is required for TCP sessions originated from spokes to fail over back and forth between the hubs.
  C. It instructs the hub to not check the ESP sequence numbers on IPsec traffic, to improve performance.
  D. It instructs the hub to skip content inspection on TCP traffic, to improve performance.
  B. It instructs the hub to disable TCP sequence number check, which is required for TCP sessions originated from spokes to fail over back and forth between the hubs.

• Question 89:

  Refer to the exhibit.

  

  Based on the exhibit, which two actions does FortiGate perform on traffic passing through port2? (Choose two.)

  A. FortiGate does not change the routing information on existing sessions that use a valid gateway, after a route change.
  B. FortiGate performs routing lookups for new sessions only, after a route change.
  C. FortiGate always blocks all traffic, after a route change.
  D. FortiGate flushes all routing information from the session table, after a route change.
  A. FortiGate does not change the routing information on existing sessions that use a valid gateway, after a route change.
  B. FortiGate performs routing lookups for new sessions only, after a route change.

• Question 90:

  Which two interfaces are considered overlay links? (Choose two.)

  A. LAG
  B. IPsec
  C. Physical
  D. GRE
  B. IPsec
  D. GRE