Free Fortinet NSE 7 – SD-WAN 7.2 Exam NSE7_SDW-7.2 Exam Practice Test

Exhibit.The exhibit shows the output of the command diagnose sys sdwan health-check status collected on a FortiGate device. Which two statements are correct about the health check status on this FortiGate device? (Choose two.)

• The health-check VPN_PING orders the members according to the lowest jitter.
• The interface T_INET_1 missed one SLA target.
• There is no SLA criteria configured for the health-check Level3_DNS.
• The interface T_INET_0 missed three SLA targets.

Which two statements about SD-WAN central management are true? (Choose two.)

• The objects are saved in the ADOM common object database.
• It does not support meta fields.
• It uses templates to configure SD-WAN on managed devices.
• It supports normalized interfaces for SD-WAN member configuration.

The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks. What are three mandatory post-run tasks that must be performed? (Choose three.)

• Create policy packages for branch devices.
• Assign an sdwan_id metadata variable to each device (branch and hub}.
• Configure routing through overlay tunnels created by the SD-WAN overlay template.
• Assign a branch_id metadata variable to each branch device.
• Configure SD-WAN rules.

Refer to the exhibit, which shows an SD-WAN zone configuration on the FortiGate GUI.Based on the exhibit, which statement is true?

• You can delete the virtual-wan-link zone because it contains no member.
• The corporate zone contains no member.
• You can move port1 from the underlay zone to the overlay zone.
• The overlay zone contains four members.

Refer to the exhibit.FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

• Specify a unique peer ID for each dial-up VPN interface.
• Use different proposals are used between the interfaces.
• Configure the IKE mode to be aggressive mode.
• Use unique Diffie Hellman groups on each VPN interface.

Refer to the exhibit.Which conclusion about the packet debug flow output is correct?

• The original traffic exceeded the maximum packets per second of the outgoing interface, and the packet was dropped.
• The reply traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.
• The original traffic exceeded the maximum bandwidth of the outgoing interface, and the packet was dropped.
• The original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.

Refer to the exhibit.Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)

• FortiGate flushes all sessions.
• FortiGate terminates the old sessions.
• FortiGate does not change existing sessions.
• FortiGate evaluates new sessions.

Refer to the exhibit.Which statement explains the output shown in the exhibit?

• FortiGate performed standard FIB routing on the session.
• FortiGate will not re-evaluate the session following a firewall policy change.
• FortiGate used 192.2.0.1 as the gateway for the original direction of the traffic.
• FortiGate must re-evaluate the session due to routing change.

Refer to the exhibits. Exhibit AExhibit BExhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration.Based on the exhibits, which two statements are correct? (Choose two.)

• FortiGate updated the outgoing interface list on the rule so it prefers port2.
• Port2 has the highest member priority.
• Port2 has a lower latency than port1.
• SD-WAN rule ID 1 is set to lowest cost (SLA) mode.

Refer to the exhibit.Based on the exhibit, which action does FortiGate take?

• FortiGate bounces port5 after it detects all SD-WAN members as dead.
• FortiGate fails over to the secondary device after it detects all SD-WAN members as dead.
• FortiGate brings up port5 after it detects all SD-WAN members as alive.
• FortiGate brings down port5 after it detects all SD-WAN members as dead.