Fortinet NSE7_SDW-7.2 Exam Practice Test Instant Access

Question 1

Which two statements about SLA targets and SD-WAN rules are true? (Choose two.)

AWhen configuring an SD-WAN rule, you can select multiple SLA targets of the same performance SLA.

BSD-WAN rules use SLA targets to check if the preferred members meet the SLA requirements.

CSLA targets are used only by SD-WAN rules that are configured with Lowest Cost (SLA) or Maximize Bandwidth (SLA) as strategy.

DMember metrics are measured only if an SLA target is configured.

Answer : B, D

Question 2

Which two statements reflect the benefits of implementing the ADVPN solution to replace conventional VPN topologies? (Choose two.)

AIt creates redundant tunnels between hub-and-spokes, in case failure takes place on the primary links.

BIt dynamically assigns cost and weight between the hub and the spokes, based on the physical distance.

CIt ensures that spoke-to-spoke traffic no longer needs to flow through the tunnels through the hub.

DIt provides direct connectivity between all sites by creating on-demand tunnels between spokes.

Answer : C, D

Question 3

Which statement about using BGP routes in SD-WAN is true?

ALearned routes can be used as dynamic destinations in SD-WAN rules.

BYou must use BGP to route traffic for both overlay and underlay links.

CYou must configure AS path prepending.

DYou must use external BGP.

Answer : A

Question 4

Refer to the Exhibits:

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.

Based on the exhibits, which statement is correct?

AThe dead member interface stays unavailable until an administrator manually brings the interface back.

BPort2 needs to wait 500 milliseconds to change the status from alive to dead.

CStatic routes using port2 are active in the routing table.

DFortiGate has not received three consecutive requests from the SLA server configured for port2.

Answer : C

Question 5

Which diagnostic command can you use to show the SD-WAN rules, interface information, and state?

Adiagnose sys sdwan service

Bdiagnose sys sdwan route-tag-list

Cdiagnose sys sdwan member

Ddiagnose sys sdwan neighbor

Answer : A

Question 6

Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?

AYou must set ike-version to 1.

BYou must enable net-device.

CYou must enable auto-discovery-sender.

DYou must disable idle-timeout.

Answer : B

Question 7

Refer to the exhibits.

Exhibit A -

Exhibit B -

Exhibit A shows the traffic shaping policy and exhibit B shows the firewall policy.

The administrator wants FortiGate to limit the bandwidth used by YouTube. When testing, the administrator determines that FortiGate does not apply traffic shaping on YouTube traffic.

Based on the policies shown in the exhibits, what configuration change must be made so FortiGate performs traffic shaping on YouTube traffic?

ADestination internet service must be enabled on the traffic shaping policy.

BApplication control must be enabled on the firewall policy.

CWeb filtering must be enabled on the firewall policy.

DIndividual SD-WAN members must be selected as the outgoing interface on the traffic shaping policy.

Answer : C

Fortinet NSE7_SDW-7.2 Fortinet NSE 7 - SD-WAN 7.2 Exam Practice Test