Fortinet NSE 7 - SD-WAN 7.2 (NSE7_SDW-7.2) Free Practice Test

Question 1

What is true about SD-WAN multiregion topologies?

A. It is not compatible with ADVPN.

B. Each region has its own SD-WAN topology

C. Routing between the hub and spokes must be BGP.

D. Regions must correspond to geographical areas.

Correct Answer: B

Question 2

Refer to the exhibit.

The device exchanges routes using IBGP.
Which two statements are correct about the IBGP configuration and routing information on the device?
(Choose two.)

A. You can run the get router info routing-table database command to display the additional paths.

B. ibgp-multipath is disabled.

C. additional-path is enabled.

D. Each BGP route is three hops away from the destination.

Correct Answer: A,C

Question 3

What are two benefits of using the Internet service database (ISDB) in an SD-WAN rule? (Choose two.)

A. The ISDB contains the IP addresses and port ranges of well-known internet services.

B. The ISDB is dynamically updated and reduces administrative overhead.

C. The ISDB requires application control to maintain signatures and perform load balancing.

D. The ISDB applies rules to traffic from specific sources, based on application type.

Correct Answer: A,B

Question 4

Refer to the exhibit.

Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD-WAN rules?

A. All traffic from a source IP is sent to the same interface.

B. All traffic from a source IP to a destination IP is sent to the same interface.

C. All traffic from a source IP is sent to the most used interface.

D. All traffic from a source IP to a destination IP is sent to the least used interface.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which two performance SLA protocols enable you to verify that the server response contains a specific value? (Choose two.)

A. icmp

B. http

C. twamp

D. dns

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which are three key routing principles in SD-WAN? (Choose three.)

A. FortiGate performs route lookups for new sessions only.

B. By default, SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

C. SD-WAN rules have precedence over ISDB routes.

D. By default, SD-WAN members are skipped if they do not have a valid route to the destination.

E. Regular policy routes have precedence over SD-WAN rules.

Correct Answer: B,D,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Exhibit B -

Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

A. port2 is referenced in a static route.

B. port1 is referenced in a firewall policy.

C. port1 is assigned a manual IP address.

D. port1 and port2 are not administratively down.

Correct Answer: B

Question 8

Which diagnostic command can you use to show the SD-WAN rules, interface information, and state?

A. diagnose sys sdwan route-tag-list

B. diagnose sys sdwan member

C. diagnose sys sdwan service

D. diagnose sys sdwan neighbor

Correct Answer: B

Question 9

Which diagnostic command can you use to show the member utilization statistics measured by performance SLAs for the last 10 minutes?

A. diagnose sys sdwan log

B. diagnose sys sdwan intf-sla-log

C. diagnose ays sdwan health-check

D. diagnose sys sdwan sla-log

Correct Answer: D

Welcome to TestSimulate

Fortinet NSE 7 - SD-WAN 7.2 (NSE7_SDW-7.2) Free Practice Test