Free Fortinet NSE7_SDW-7.2 Exam Questions

Become Fortinet Certified with updated NSE7_SDW-7.2 exam questions and correct answers

Page: 1 / 19

Total 93 Questions | Updated On: Nov 13, 2024

Add To Cart

Question 1

Which statement is correct about SD-WAN and ADVPN?

A : Routes for ADVPN shortcuts must be manually configured.

B : SD-WAN can steer traffic to ADVPN shortcuts, established over IPsec overlays, configured as SD-WAN members.

C : SD-WAN does not monitor the health and performance of ADVPN shortcuts.

D : You must use IKEv2 on IPsec tunnels.

Answer: B

Question 2

Refer to the exhibit.

Based on the exhibit, which two actions does FortiGate perform on traffic passing through port2? (Choose two.)

A : FortiGate does not change the routing information on existing sessions that use a valid gateway, after a route change.

B : FortiGate performs routing lookups for new sessions only, after a route change.

C : FortiGate always blocks all traffic, after a route change.

D : FortiGate flushes all routing information from the session table, after a route change.

Answer: A,B

Question 3

What are two reasons for using FortiManager to organize and manage the network for a group of FortiGate devices? (Choose two.)

A : It simplifies the deployment and administration of SD-WAN on managed FortiGate devices.

B : It improves SD-WAN performance on the managed FortiGate devices.

C : It sends probe signals as health checks to the beacon servers on behalf of FortiGate.

D : It acts as a policy compliance entity to review all managed FortiGate devices.

E : It reduces WAN usage on FortiGate devices by acting as a local FortiGuard server.

Answer: A,E

Question 4

Refer to the exhibit.

Which two SD-WAN template member settings support the use of FortiManager meta fields? (Choose two.)

A : Cost

B : Interface member

C : Priority

D : Gateway IP

Answer: B,D

Question 5

Refer to the exhibits.

An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator

collected the information shown in exhibit A.

After generating GoToMeeting test traffic, the administrator examined the respective traffic log on

FortiAnalyzer, which is shown in exhibit B. The administrator noticed that the traffic matched the implicit

SD-WAN rule, but they expected the traffic to match rule ID 1.

Which two reasons explain why the traffic matched the implicit SD-WAN rule? (Choose two.)

A : FortiGate did not refresh the routing information on the session after the application was detected.

B : Port1 and port2 do not have a valid route to the destination.

C : Full SSL inspection is not enabled on the matching firewall policy.

D : The session 3-tuple did not match any of the existing entries in the ISDB application cache.

Answer: A,D

Page: 1 / 19

Total 93 Questions | Updated On: Nov 13, 2024

Add To Cart