NSE7_SDW-7.2 Exam Questions

Which are two benefits of using CLI templates in FortiManager? (Choose two.)

What is the route-tag setting in an SD-WAN rule used for?

Refer to the exhibit. The exhibit shows the SD-WAN rule status and configuration. Based on the exhibit, which change in the measured latency will make T_MPLS_0 the new preferred me...

Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows the traffic shaping policy and exhibit B shows the firewall policy. The administrator wants FortiGate to limit the bandwi...

Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke. What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?

Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B shows the system global and sys...

Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member status, the routing table, and the performance SLA statu...

Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

Refer to the exhibit. Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules?

Which are three key routing principles in SD-WAN? (Choose three.)

What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )

In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

Refer to the exhibit. FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN. Which two configuration changes must be made to both IPsec VPN inte...

Refer to the exhibit. Based on the output, which two conclusions are true? (Choose two.)

Which two tasks about using central VPN management are true? (Choose two.)

Which diagnostic command can you use to show the SD-WAN rules interface information and state?

Which feature enables SD-WAN to combine IPsec VPN dynamic shortcut tunnels between spokes and a static tunnel to the hub?

Refer to exhibits. Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy. The traffic shaping policy is being applied to all outbound traffic; however,...

Based on the exhibit, which status description is correct?

Which statement about using BGP routes in SD-WAN is true?

Which two statements about SLA targets and SD-WAN rules are true? (Choose two.)

Which statement is correct about SD-WAN and ADVPN?

Refer to the exhibit. Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

Which diagnostic command can you use to show the member utilization statistics measured by performance SLAs for the last 10 minutes?

Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)

Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)

Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member st...

Refer to the exhibit. Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke grou...

Which two performance SLA protocols enable you to verify that the server response contains a specific value? (Choose two.)

Refer to the exhibit. Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

Refer to the exhibit. The device exchanges routes using IBGP. Which two statements are correct about the IBGP configuration and routing information on the device? (Choose two.)

In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

Which components make up the secure SD-WAN solution?

Refer to the exhibit. Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule?...

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

Refer to the exhibit. Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

Refer to the exhibit. Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?

Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

Refer to the exhibit. Exhibit A Exhibit B Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate. Based on t...

Which two statements are correct when traffic matches the implicit SD-WAN rule? (Choose two.)

Refer to the exhibit. An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects th...

Refer to the exhibit. Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)

Which two statements about SD-WAN central management are true? (Choose two.)

Exhibit. Which conclusion about the packet debug flow output is correct?

Refer to the exhibits. Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows the source NAT (SNAT) global setting and exhibit B shows the routing table on FortiGate. Based on the exhibits, which two...

Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows the SD-WAN performance SLA configuration, the SD-WAN rule configuration, and the application IDs of Facebook and YouTube....

Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration. Based on the exhibits, which...

Which two interfaces are considered overlay links? (Choose two.)