Fortinet NSE7_SDW-7.2 - Fortinet NSE 7 - SD-WAN 7.2 Exam
Page: 3 / 14
Total 70 questions
Question #11 (Topic: Exam A)
Which diagnostic command can you use to show the configured SD-WAN zones and their assigned members?
A. diagnose sys sdwan member
B. diagnose sys sdwan interface
C. diagnose sys sdwan zone
D. diagnose sys sdwan service
Answer: C
Question #12 (Topic: Exam A)
Which statement is correct about SD-WAN and ADVPN?
A. SD-WAN can steer traffic to ADVPN shortcuts only for rules defined with strategy manual or best quality.
B. SD-WAN does not monitor the health and performance of ADVPN shortcuts.
C. SD-WAN cannot steer traffic to ADVPN shortcuts established over IPSec overlays if the zone contains physical interfaces.
D. SD-WAN can steer traffic to ADVPN shortcuts established over IPsec overlays configured as SD-WAN members.
Answer: D
Question #13 (Topic: Exam A)
Refer to the exhibit.
The exhibit shows the SD-WAN rule status and configuration.
Based on the exhibit, which change in the measured latency will make T_MPLS_0 the new preferred member?
The exhibit shows the SD-WAN rule status and configuration.
Based on the exhibit, which change in the measured latency will make T_MPLS_0 the new preferred member?
A. When T_INET_0_0 has a latency of 250 ms.
B. When T_MPLS_0 has a latency of 80 ms.
C. When T_INET_0_0 and T_MPLS_0 have the same latency.
D. When T_MPLS_0 has a latency of 100 ms.
Answer: B
Question #14 (Topic: Exam A)
What is a benefit of using application steering in SD-WAN?
A. The traffic always skips the regular policy routes.
B. You do not need to configure firewall policies that accept the SD-WAN traffic.
C. You steer traffic based on the detected application.
D. You do not need to enable SSL inspection.
Answer: C
Question #15 (Topic: Exam A)
Refer to the exhibit.
Based on the exhibit, which two statements are correct about the health of the selected members? (Choose two.)
Based on the exhibit, which two statements are correct about the health of the selected members? (Choose two.)
A. After FortiGate switches to active mode, the SLA performance rule never fallsback to passive monitoring.
B. FortiGate passively monitors the member if TCP traffic is passing through the member.
C. FortiGate can offload the traffic that is subject to passive monitoring to hardware.
D. During passive monitoring, the SLA performance rule cannot detect dead members.
Answer: BD
