Free Fortinet NSE7_SDW-7.2 Exam Questions

Become Fortinet Certified with updated NSE7_SDW-7.2 exam questions and correct answers

Page: 1 / 19

Total 93 Questions | Updated On: Mar 27, 2025

Add To Cart

Question 1

Which statement about using BGP routes in SD-WAN is true?

A : Learned routes can be used as dynamic destinations in SD-WAN rules.

B : You must use BGP to route traffic for both overlay and underlay links.

C : You must configure AS path prepending.

D : You must use external BGP.

Answer: A

Question 2

Refer to the exhibits.

An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator

collected the information shown in exhibit A.

After generating GoToMeeting test traffic, the administrator examined the respective traffic log on

FortiAnalyzer, which is shown in exhibit B. The administrator noticed that the traffic matched the implicit

SD-WAN rule, but they expected the traffic to match rule ID 1.

Which two reasons explain why the traffic matched the implicit SD-WAN rule? (Choose two.)

A : FortiGate did not refresh the routing information on the session after the application was detected.

B : Port1 and port2 do not have a valid route to the destination.

C : Full SSL inspection is not enabled on the matching firewall policy.

D : The session 3-tuple did not match any of the existing entries in the ISDB application cache.

Answer: A,D

Question 3

Refer to the exhibit.

Based on the exhibit, which action does FortiGate take?

A : FortiGate bounces port5 after it detects all SD-WAN members as dead.

B : FortiGate fails over to the secondary device after it detects all SD-WAN members as dead.

C : FortiGate brings up port5 after it detects all SD-WAN members as alive.

D : FortiGate brings down port5 after it detects all SD-WAN members as dead.

Answer: A

Question 4

Which SD-WAN setting enables FortiGate to delay the recovery of ADVPN shortcuts?

A : hold-down-time

B : link-down-failover

C : auto-discovery-shortcuts

D : idle-timeout

Answer: A

Question 5

In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

A : Traffic has matched none of the FortiGate policy routes.

B : Matched traffic failed RPF and was caught by the rule.

C : The FIB lookup resolved interface was the SD-WAN interface.

D : An absolute SD-WAN rule was defined and matched traffic.

Answer: A,C

Page: 1 / 19

Total 93 Questions | Updated On: Mar 27, 2025

Add To Cart