NSE6_SDW_AD-7.6 Exam Questions
81 real NSE6_SDW_AD-7.6 exam questions with expert-verified answers and explanations. Page 1 of 2.
- Question #1Initial Deployment and Configuration
You manage an SD-WAN topology and you will soon deploy 50 new branches. Which two tasks can you do in advance to simplify this deployment? (Choose two.)
model devicesmetadata variablesZTPbranch deployment - Question #2Advanced SD-WAN Features
You are planning a new SD-WAN deployment with the following criteria: - Two regions - Most of the traffic is expected to remain within its region - No requirement for inter-region...
IBGPEBGPoverlay routingregional topology - Question #3Initial Deployment and Configuration
Refer to the exhibit. The administrator configured the IPsec tunnel VPN1 on a FortiGate device with the parameters shown in exhibit. Based on the configuration, which three conclus...
IPsec VPNIKEv2hub-and-spokeoverlay IP assignment - Question #4Initial Deployment and Configuration
You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use in health-check and SD-WAN rul...
SD-WAN memberzone managementmember deletion - Question #5Advanced SD-WAN Features
Refer to the exhibits. The exhibits show the source NAT (SNAT) global setting. port2 interface settings, and the routing table on FortiGate. The administrator increases the member...
SNATdirty sessionsmember prioritysession management - Question #6Advanced SD-WAN Features
Refer to the exhibits. The exhibits show the configuration for SD-WAN performance. SD-WAN rule, the application IDs of Facebook and YouTube along with the firewall policy configura...
application-based SLAperformance measurementhealth checkSD-WAN rules - Question #7SD-WAN Monitoring and Troubleshooting
When you use the command diagnose sys session list, how do you identify the sessions that correspond to traffic steered according to SD-WAN rules?
session diagnosticssdwan_service_idCLI troubleshooting - Question #8Initial Deployment and Configuration
SD-WAN interacts with many other FortiGate features. Some of them are required to allow SD- WAN to steer the traffic. Which three configuration elements that you must configure bef...
SD-WAN prerequisitesfirewall policiesroutinginterfaces - Question #9Initial Deployment and Configuration
Which three characteristics apply to provisioning templates available on FortiManager? (Choose three.)
FortiManager templatesCLI templatestemplate groupsprovisioning - Question #10SD-WAN Monitoring and Troubleshooting
Refer to the exhibit. An administrator checks the status of an SD-WAN topology using the FortiManager SD-WAN monitor menus. All members are configured with one or two SLAs. Which t...
FortiManager monitoringSD-WAN topologySLA statusbranch devices - Question #11Advanced SD-WAN Features
You are tasked with configuring ADVPN 2.0 on an SD-WAN topology already configured for ADVPN. What should you do to implement ADVPN 2.0 in this scenario?
ADVPN 2.0VPN upgradebranch configurationhub-and-spoke - Question #12SD-WAN Monitoring and Troubleshooting
Refer to the exhibits. An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in the first ex...
application steeringISDB cachesession refreshSSL inspection - Question #13SD-WAN Fundamentals
Which statement describes FortiGate behavior when you reference a zone in a static route?
static routesSD-WAN zonesECMProuting behavior - Question #14SD-WAN Monitoring and Troubleshooting
Refer to the exhibit. An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects th...
SD-WAN rule matchingpolicy routeroute prioritytroubleshooting - Question #15Advanced SD-WAN Features
Refer to the exhibit. The administrator analyzed the traffic between a branch FortiGate and the server located in the data center, and noticed the behavior shown in the diagram. Wh...
auxiliary-sessionasymmetric routingreply trafficDC routing - Question #16SD-WAN Fundamentals
When a customer delegate the installation and management of its SD-WAN infrastructure to an MSSP, the MSSP usually keeps the hub within its infrastructure for ease of management an...
MSSPhub placementSIAcentralized breakout - Question #17Initial Deployment and Configuration
The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks....
SD-WAN overlay templatepost-run taskspolicy packagesSD-WAN rules - Question #18SD-WAN Monitoring and Troubleshooting
Refer to the exhibits. You use FortiManager to configure SD-WAN on three branch devices. When you install the device settings. FortiManager prompts you with the error "Copy Failed"...
FortiManager installationmetadata variablesper-device mappingCopy Failed error - Question #19SD-WAN Fundamentals
Within the context of SD-WAN, what does SIA correspond to?
SIAremote breakoutinternet accessSD-WAN terminology - Question #20Initial Deployment and Configuration
Refer to the exhibit. The administrator used the SD-WAN overlay template to prepare an IPsec tunnels configuration for a hub-and-spoke SD-WAN topology. The exhibit shows the FortiM...
ADVPNhub deviceIPsec tunnelsSD-WAN overlay template - Question #21Initial Deployment and Configuration
Refer to the exhibits. The exhibits show two IPsec templates to define Branch IPsec 1 and Branch_IPsec_2. Each template defines a VPN tunnel. The error message that FortiManager di...
IPsec templatesFortiManager template assignmentVPN tunneltemplate constraints - Question #22SD-WAN Fundamentals
Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI. What can you conclude about the zone and member configuration on this device?
SD-WAN zoneszone membersoverlay zoneszone configuration - Question #23SD-WAN Monitoring and Troubleshooting
Refer to the exhibit. The exhibit shows output of the command diagnose sys sdwan service4 collected on a FortiGate device The administrator wants to know through which interface Fo...
SD-WAN service rulesapplication steeringdiagnose sdwanimplicit rule fallback - Question #24Initial Deployment and Configuration
Refer to the exhibit. For your ZTP deployment, you review the CSV file shown in exhibit and note that it is missing important information. Which two elements must you change before...
ZTP deploymentCSV importdevice blueprintmetadata variables - Question #25SD-WAN Fundamentals
An administrator is configuring SD-WAN to load balance their network traffic. Which two things should they consider when setting up SD-WAN? (Choose two.)
SD-WAN load balancingtraffic strategiesSLA membersoutbandwidth hash - Question #26SD-WAN Fundamentals
Which two statements correctly describe what happens when traffic matches the implicit SD-WAN rule? (Choose two.)
implicit SD-WAN rulesession informationpolicy route tablevwl_default - Question #27Advanced SD-WAN Features
Refer to the exhibit. Which statement best describe the role of the ADVPN device in handling traffic?
ADVPNhub-and-spokeshortcut query forwardinghub role - Question #28Initial Deployment and Configuration
Refer to the exhibits. You use FortiManager to manage the branch devices and configure the SD- WAN template. You have configured direct internet access (DIA) for the IT department...
FortiManager policy installsecure internet accessSD-WAN member referenceDIA vs SIA - Question #29SD-WAN Fundamentals
What are three key routing principles of SD-WAN? (Choose three.)
SD-WAN routing principlespolicy route precedencestatic routesroute selection - Question #30SD-WAN Monitoring and Troubleshooting
Refer to the exhibit, which shows the SD-WAN rule status and configuration. Based on the exhibit, which change in the measured packet loss will make HUB1-VPN3 the new preferred mem...
SD-WAN rule statuspacket loss thresholdSLA preferred membermember failover - Question #31Advanced SD-WAN Features
Refer to the exhibit. Two hub-and-spoke groups are connected through redundant site-to-site IPsec VPNs between Hub 1 and Hub 2. Which two configuration settings are required for th...
ADVPN inter-regionauto-discovery-forwarderauto-discovery-sendercross-hub shortcut - Question #32SD-WAN Monitoring and Troubleshooting
Refer to the exhibit. Which SD-WAN rule and interface uses FortiGate to steer the traffic from the LAN subnet 10.0.1.0/24 to the corporate server 10.2.5.254?
SD-WAN service ruleinterface selectiontraffic steeringdiagnose output analysis - Question #33Initial Deployment and Configuration
Refer to the exhibit. You want to configure SD-WAN on a network as shown in the exhibit. The network contains many FortiGate devices. Some are used as NGFW, and some are installed...
SD-WAN topology planningFortiGate extensionshub selectiondeployment constraints - Question #34SD-WAN Monitoring and Troubleshooting
Refer to the exhibit that shows event logs on FortiGate. Based on the output shown in the exhibit, what can you say about the tunnels on this device?
event logsADVPN shortcut tunnelsmaster tunnelshortcut identification - Question #35SD-WAN Monitoring and Troubleshooting
Refer to the exhibit. Which action will FortiGate take if it detects SD-WAN members as dead?
SD-WAN member dead detectionport shutdownhealth checkfailover action - Question #36Advanced SD-WAN Features
You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPN between the spokes. Some remote sites use FortiSASE to connect to the company's SD...
BGP on loopbackADVPN large-scaleFortiSASE integrationoverlay routing design - Question #37SD-WAN Monitoring and Troubleshooting
Refer to the exhibits. You connect to a device behind a branch FortiGate device and initiate a ping test. The device is part of the LAN subnet and its IP address is 10.0.1.101. Bas...
interface selectiontraffic steeringSD-WAN rule matchingLAN subnet routing - Question #38Initial Deployment and Configuration
Refer to the exhibit. An administrator configures SD-WAN rules for a DIA setup using the FortiGate GUI. The page to configure the source and destination part of the rule looks as s...
SD-WAN rule application destinationfeature visibilityGUI configurationDIA setup - Question #39SD-WAN Fundamentals
Which statement about SD-WAN zones is true?
SD-WAN zoneszone member limitsVDOM limitszone capacity - Question #40SD-WAN Fundamentals
Which two statements are correct when traffic matches the implicit SD-WAN rule? (Choose two.)
implicit SD-WAN rulepolicy route tableECMP modesession information - Question #41Initial Deployment and Configuration
In which SD-WAN template field can you use a metadata variable?
metadata variablesSD-WAN templatesFortiManagertemplate fields - Question #42SD-WAN Monitoring and Troubleshooting
Refer to the exhibit, which shows output of the command diagnose sys sdwan health-check status collected on a FortiGate device. Which two statements are correct about the health ch...
health check statusSLA targetsperformance SLAdiagnose command - Question #43Initial Deployment and Configuration
Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows a policy package definition. Exhibit B shows the install log that the administrator received when he tried to install the...
dynamic interface mappingpolicy package installationFortiManagerLAN interface - Question #44Advanced SD-WAN Features
What is true about SD-WAN multiregion topologies?
multiregion topologySD-WAN regionshub-and-spokeregional design - Question #45SD-WAN Monitoring and Troubleshooting
Refer to the exhibit that shows VPN event logs on FortiGate. Based on the output shown in the exhibit, which statement is true?
ADVPNshortcut tunnelVPN event logsmaster tunnel - Question #46Initial Deployment and Configuration
Refer to the exhibits. You use FortiManager to configure SD-WAN on three branch devices. When you install the device settings, FortiManager prompts you with the error "Copy Failed"...
FortiManager installation errormetadata variablesSD-WAN member gatewayper-device mapping - Question #47Advanced SD-WAN Features
You configured an SD-WAN rule with the best quality strategy and selected the predefined health check, Default_FortiGuard, to check the link performances against FortiGuard servers...
best quality strategylink quality indexSD-WAN rule traffic steeringmember selection order - Question #48SD-WAN Monitoring and Troubleshooting
Refer to the exhibit. What conclusions can you draw about the traffic received by FortiGate originating from the source LAN device 10.0.1.133 and destined for the company's SMTP ma...
traffic steeringSD-WAN rule matchingSMTP trafficfirewall policy - Question #49Initial Deployment and Configuration
Refer to the exhibit. You configure SD-WAN on a standalone FortiGate device. You want to create an SD-WAN rule that steers Facebook and Linkedin traffic through the less costly int...
internet service destinationSD-WAN rulesapplication steeringFortiGate GUI - Question #50SD-WAN Monitoring and Troubleshooting
An SD-WAN member is no longer used to steer SD-WAN traffic. The administrator updated the SD-WAN configuration and deleted the unused member. After the configuration update, users...
SD-WAN member deletionstatic routestraffic interruptiontroubleshooting