NSE7_SDW-7.2 Exam Questions
96 real NSE7_SDW-7.2 exam questions with expert-verified answers and explanations. Page 1 of 2.
- Question #1
Which are two benefits of using CLI templates in FortiManager? (Choose two.)
- Question #2
What is the route-tag setting in an SD-WAN rule used for?
- Question #3
Refer to the exhibit. The exhibit shows the SD-WAN rule status and configuration. Based on the exhibit, which change in the measured latency will make T_MPLS_0 the new preferred me...
- Question #4
Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows the traffic shaping policy and exhibit B shows the firewall policy. The administrator wants FortiGate to limit the bandwi...
- Question #5
Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke. What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD-WAN?
- Question #6
Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B shows the system global and sys...
- Question #7
Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows the SD-WAN performance SLA and exhibit B shows the SD-WAN member status, the routing table, and the performance SLA statu...
- Question #8
Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?
- Question #9
Refer to the exhibit. Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules?
- Question #10
Which are three key routing principles in SD-WAN? (Choose three.)
- Question #11
What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two )
- Question #12
In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )
- Question #13
Refer to the exhibit. FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN. Which two configuration changes must be made to both IPsec VPN inte...
- Question #14
Refer to the exhibit. Based on the output, which two conclusions are true? (Choose two.)
- Question #15
Which two tasks about using central VPN management are true? (Choose two.)
- Question #16
Which diagnostic command can you use to show the SD-WAN rules interface information and state?
- Question #17
Which feature enables SD-WAN to combine IPsec VPN dynamic shortcut tunnels between spokes and a static tunnel to the hub?
- Question #18
Refer to exhibits. Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy. The traffic shaping policy is being applied to all outbound traffic; however,...
- Question #19
Based on the exhibit, which status description is correct?
- Question #20
Which statement about using BGP routes in SD-WAN is true?
- Question #21
Which two statements about SLA targets and SD-WAN rules are true? (Choose two.)
- Question #22
Which statement is correct about SD-WAN and ADVPN?
- Question #23
Refer to the exhibit. Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)
- Question #24
Which diagnostic command can you use to show the member utilization statistics measured by performance SLAs for the last 10 minutes?
- Question #25
Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)
- Question #26
Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)
- Question #27
Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member st...
- Question #28
Refer to the exhibit. Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke grou...
- Question #29
Which two performance SLA protocols enable you to verify that the server response contains a specific value? (Choose two.)
- Question #30
Refer to the exhibit. Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)
- Question #31
Refer to the exhibit. The device exchanges routes using IBGP. Which two statements are correct about the IBGP configuration and routing information on the device? (Choose two.)
- Question #32
In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)
- Question #33
Which components make up the secure SD-WAN solution?
- Question #34
Refer to the exhibit. Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule?...
- Question #35
What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)
- Question #36
Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )
- Question #37
Refer to the exhibit. Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?
- Question #38
Refer to the exhibit. Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?
- Question #39
Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?
- Question #40
Refer to the exhibit. Exhibit A Exhibit B Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate. Based on t...
- Question #41
Which two statements are correct when traffic matches the implicit SD-WAN rule? (Choose two.)
- Question #42
Refer to the exhibit. An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects th...
- Question #43
Refer to the exhibit. Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)
- Question #44
Which two statements about SD-WAN central management are true? (Choose two.)
- Question #45
Exhibit. Which conclusion about the packet debug flow output is correct?
- Question #46
Refer to the exhibits. Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)
- Question #47
Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows the source NAT (SNAT) global setting and exhibit B shows the routing table on FortiGate. Based on the exhibits, which two...
- Question #48
Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows the SD-WAN performance SLA configuration, the SD-WAN rule configuration, and the application IDs of Facebook and YouTube....
- Question #49
Refer to the exhibits. Exhibit A Exhibit B Exhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration. Based on the exhibits, which...
- Question #50
Which two interfaces are considered overlay links? (Choose two.)