NSE7_SDW-7.0 Online Practice Questions and Answers

Refer to the exhibits.

Exhibit A

Exhibit B

Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status.

The administrator wants to understand the expected behavior for traffic matching the SD- WAN rule.

Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

A. The traffic will be load balanced across all three overlays.

B. The traffic will be routed over T_INET_0_0.

C. The traffic will be routed over T_MPLS_0.

D. The traffic will be routed over T_INET_1_0.

Refer to the exhibit, which shows the IPsec phase 1 configuration of a spoke.

What must you configure on the IPsec phase 1 configuration for ADVPN to work with SD- WAN?

A. You must set ike-version to 1.

B. You must enable net-device.

C. You must enable auto-discovery-sender.

D. You must disable idle-timeout.

Refer to the exhibit.

FortiGate has multiple dial-up VPN interfaces incoming on port1 that match only FIRST_VPN.

Which two configuration changes must be made to both IPsec VPN interfaces to allow incoming connections to match all possible IPsec dial-up interfaces? (Choose two.)

A. Specify a unique peer ID for each dial-up VPN interface.

B. Use different proposals are used between the interfaces.

C. Configure the IKE mode to be aggressive mode.

D. Use unique Diffie Hellman groups on each VPN interface.

Which two statements about SD-WAN central management are true? (Choose two.)

A. The objects are saved in the ADOM common object database.

B. It does not support meta fields.

C. It uses templates to configure SD-WAN on managed devices.

D. It supports normalized interfaces for SD-WAN member configuration.

Refer to exhibits.

Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic. Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)

A. The implicit rule overrides all other rules because parameters widely cover sources and destinations.

B. SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.

C. The All_Access_Rules rule load balances Vimeo application traffic among SD-WAN member interfaces.

D. The initial session of an application goes through a learning phase in order to apply the correct rule.

Refer to the exhibit.

Based on the output shown in the exhibit, which two criteria on the SD-WAN member configuration can be used to select an outgoing interface in an SD-WAN rule? (Choose two.)

A. Set priority 10.

B. Set cost 15.

C. Set load-balance-mode source-ip-ip-based.

D. Set source 100.64.1.1.

Which diagnostic command can you use to show the SD-WAN rules interface information and state?

A. diagnose sys sdwan route-tag-list.

B. diagnose sys sdwan service.

C. diagnose sys sdwan member.

D. diagnose sys sdwan neighbor.

What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two )

A. It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.

B. It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices.

C. It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager.

D. It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager.

Which diagnostic command you can use to show interface-specific SLA logs for the last 10 minutes?

A. diagnose sys virtual-wan-link health-check

B. diagnose sys virtual-wan-link log

C. diagnose sys virtual-wan-link sla-log

D. diagnose sys virtual-wan-link intf-sla-log

Refer to the exhibit.

Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

A. FortiGate creates separate virtual interfaces for each dial-up client.

B. FortiGate creates a single IPsec virtual interface that is shared by all clients.

C. FortiGate maps the remote gateway 100.64.3.1 to tunnel index interface 1.

D. FortiGate does not install IPsec static routes for remote protected networks in the routing table.