Fortinet NSE7_SDW-7.2 Exam Questions Instant Access

Question 1

What are two benefits of choosing packet duplication over FEC for data loss correction on noisy links? (Choose two.)

APacket duplication can leverage multiple IPsec overlays for sending additional data.

BPacket duplication does not require a route to the destination.

CPacket duplication supports hardware offloading.

DPacket duplication uses smaller parity packets which results in less bandwidth consumption.

Answer : A, C

Question 2

Which statement about using BGP routes in SD-WAN is true?

ALearned routes can be used as dynamic destinations in SD-WAN rules.

BYou must use BGP to route traffic for both overlay and underlay links.

CYou must configure AS path prepending.

DYou must use external BGP.

Answer : A

Question 3

Refer to the exhibit.

Which two statements about the IPsec VPN configuration and the status of the IPsec VPN tunnel are true? (Choose two.)

AFortiGate does not install IPsec static routes for remote protected networks in the routing table.

BThe phase 1 configuration supports the network-overlay setting.

CFortiGate facilitated the negotiation of the T_INET_1_0_0 ADVPN shortcut over T_INET_1_0.

DDead peer detection is disabled.

Answer : A, B

Question 4

Which are two benefits of using CLI templates in FortiManager? (Choose two.)

AYou can reference meta fields.

BYou can configure interfaces as SD-WAN members without having to remove references first.

CYou can configure FortiManager to sync local configuration changes made on the managed device, to the CLI template.

DYou can configure advanced CLI settings.

Answer : A, D

Question 5

Refer to the exhibit.

The exhibit shows the details of a session and the index numbers of some relevant interfaces on a FortiGate appliance that supports hardware offloading. Based on the information shown in the exhibits, which two statements about the session are true? (Choose two.)

AThe reply direction of the asymmetric traffic flows from port2 to port3.

BThe auxiliary session can be offloaded to hardware.

CThe original direction of the symmetric traffic flows from port3 to port2.

DThe main session cannot be offloaded to hardware.

Answer : A, B

Question 6

Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.

The traffic shaping policy is being applied to all outbound traffic; however, inbound traffic is not being evaluated by the shaping policy.

Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?

ACreate a new firewall policy, and the select the SD-WAN zone as Incoming Interface.

BIn the traffic shaping policy, select Assign Shaping Class ID as Action.

CIn the firewall policy, select Proxy-based as Inspection Mode.

DIn the traffic shaping policy, enable Reverse shaper, and then select the traffic shaper to use.

Answer : D

Question 7

Refer to the exhibits.

Exhibit A

Exhibit B

Exhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration.

Based on the exhibits, which two statements are correct? (Choose two.)

AFortiGate updated the outgoing interface list on the rule so it prefers port2.

BPort2 has the highest member priority.

CPort2 has a lower latency than port1.

DSD-WAN rule ID 1 is set to lowest cost (SLA) mode.

Answer : A, C

Fortinet NSE 7 - SD-WAN 7.2 NSE7_SDW-7.2 Exam Questions