Free Fortinet NSE 7 – SD-WAN 7.2 Exam NSE7_SDW-7.2 Exam Practice Test

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.Based on the exhibit, which statement is true?

• You can delete the virtual-wan-link zone because it contains no member.
• The corporate zone contains no member.
• You can move port1 from the underlay zone to the overlay zone.
• The overlay zone contains four members.

Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

• Interface-based shaping mode
• Reverse-policy shaping mode
• Shared-policy shaping mode
• Per-IP shaping mode

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

• The traffic shaper drops packets if the bandwidth is less than 2500 KBps.
• The measured bandwidth is less than 100 KBps.
• The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.
• The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.

Exhibit.The exhibit shows the output of the command diagnose sys sdwan health-check status collected on a FortiGate device. Which two statements are correct about the health check status on this FortiGate device? (Choose two.)

• The health-check VPN_PING orders the members according to the lowest jitter.
• The interface T_INET_1 missed one SLA target.
• There is no SLA criteria configured for the health-check Level3_DNS.
• The interface T_INET_0 missed three SLA targets.

Refer to the exhibit.Which statement explains the output shown in the exhibit?

• FortiGate performed standard FIB routing on the session.
• FortiGate will not re-evaluate the session following a firewall policy change.
• FortiGate used 192.2.0.1 as the gateway for the original direction of the traffic.
• FortiGate must re-evaluate the session due to routing change.

Which statement about SD-WAN zones is true?

• An SD-WAN zone can contain only one type of interface.
• An SD-WAN zone can contain between 0 and 512 members.
• You cannot use an SD-WAN zone in static route definitions.
• You can configure up to 32 SD-WAN zones per VDOM.

Which are three key routing principles in SD-WAN? (Choose three.)

• FortiGate performs route lookups for new sessions only.
• Regular policy routes have precedence over SD-WAN rules.
• SD-WAN rules have precedence over ISDB routes.
• By default, SD-WAN members are skipped if they do not have a valid route to the destination.
• By default, SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

Refer to the exhibits.Exhibit A shows the packet duplication rule configuration, the SD-WAN zone status output, and thesniffer output on FortiGate acting as the sender. Exhibit B shows the sniffer output on a FortiGate acting as the receiver.The administrator configured packet duplication on both FortiGate devices. The sniffer output on the sender FortiGate shows that FortiGate forwards an ICMP echo request packet over three overlays, but it only receives one reply packet through T_INET_1_0.Based on the output shown in the exhibits, which two reasons can cause the observed behavior? (Choose two.)

• On the receiver FortiGate, packet-de-duplication is enabled.
• The ICMP echo request packets sent over T_INET_0_0 and T_MPLS_0 were dropped along the way.
• The ICMP echo request packets received over T_INET_0_0 and T_MPLS_0 were ofloaded to NPU.
• On the sender FortiGate, duplication-max-num is set to 3.

Refer to the exhibit.Which conclusion about the packet debug flow output is correct?

• The original traffic exceeded the maximum packets per second of the outgoing interface, and the packet was dropped.
• The reply traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
• The original traffic exceeded the maximum bandwidth of the outgoing interface, and the packet was dropped.
• The original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.

Which statement about using BGP for ADVPN is true?

• You must use BGP to route traffic for both overlay and underlay links.
• You must configure AS path prepending.
• You must configure BGP communities.
• IBGP is preferred over EBGP, because IBGP preserves next hop information.