Fortinet NSE 7 - SD-WAN 7.2 - NSE7_SDW-7.2 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

What three characteristics apply to provisioning templates available on FortiManager? (Choose three.)

A. A template group can contain CLI templates of both types. B. A template group can include a system template and an SD-WAN template. C. Templates are applied in order, from top to bottom. D. You can apply a system template and a CLI template to the same FortiGate device. E. A CLI template can be of type CLI script or Perl script.

Discussion 0

Correct Answer: A,C,E Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

What are two benefits of choosing packet duplication over FEC for data loss correction on noisy links?
(Choose two.)

A. Packet duplication uses smaller parity packets which results in less bandwidth consumption. B. Packet duplication can leverage multiple IPsec overlays for sending additional data. C. Packet duplication does not require a route to the destination. D. Packet duplication supports hardware offloading.

Discussion 0

Correct Answer: B,D Vote an answer

Question 3

Refer to the exhibit.

The exhibit shows output of the command diagnose 3vg sdwan service collected on a FortiGate device.
The administrator wants to know through which interface FortiGate will steer the traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a destination of the business application Salesforce located on HO servers 10.0.0.1.
Based on the exhibits, which two statements are correct? (Choose two.)

A. There is no service defined for the Salesforce application, so FortiGate will use the service rule 3 and steer the traffic through interface T_HQ1. B. When FortiGate cannot recognize the application of the flow it steers the traffic destined to server
10.0.0.1 according to service rule 3. C. FortiGate steers traffic to HO servers according to service rule 1 and it uses port1 or port2 because both interfaces are selected. D. FortiGate steers traffic for business application according to service rule 2 and steers traffic through port2.

Discussion 0

Correct Answer: B,D Vote an answer

Question 4

Which two statements are true about using SD-WAN to steer local-out traffic? (Choose two.)

A. By default, local-out traffic does not use SD-WAN. B. FortiGate does not consider the source address of the packet when matching an SD-WAN rule for local- out traffic. C. By default, FortiGate does not check if the selected member has a valid route to the destination. D. You must configure each local-out feature individually, to use SD-WAN.

Discussion 0

Correct Answer: A,D Vote an answer

Question 5

Exhibit B -

Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

A. port1 is referenced in a firewall policy. B. port2 is referenced in a static route. C. port1 is assigned a manual IP address. D. port1 and port2 are not administratively down.

Discussion 0

Correct Answer: A Vote an answer

Question 6

Refer to the exhibit.

Which statement about the role of the ADVPN device in handling traffic is true?

A. This is a hub that has received a query from a spoke and has forwarded it to another spoke. B. This is a spoke that has received a query from a remote hub and has forwarded the response to its hub. C. Two spokes,192.2.0.1and10.0.2.101, forward their queries to their hubs. D. Two hubs,10.0.1.101and10.0.2.101, are receiving and forwarding queries between each other.

Discussion 0

Correct Answer: A Vote an answer

Question 7

Refer to the exhibit.

Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change?
(Choose two.)

A. FortiGate flushes all sessions. B. FortiGate evaluates new sessions. C. FortiGate does not change existing sessions. D. FortiGate terminates the old sessions.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

Refer to the exhibit.

Based on the exhibit, which action does FortiGate take?

A. FortiGate fails over to the secondary device after it detects all SD-WAN members as dead. B. FortiGate bounces port5 after it detects all SD-WAN members as dead. C. FortiGate brings up port5 after it detects all SD-WAN members as alive. D. FortiGate brings down port5 after it detects all SD-WAN members as dead.

Discussion 0

Correct Answer: B Vote an answer

Question 9

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

A. The measured bandwidth is less than 100 KBps. B. The traffic shaper drops packets if the bandwidth exceeds 6250 KBps. C. The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps. D. The traffic shaper drops packets if the bandwidth is less than 2500 KBps.

Discussion 0

Correct Answer: A,B Vote an answer

Question 10

Which two statements about SD-WAN central management are true? (Choose two.)

A. It is enabled by default. B. It does not allow you to monitor the status of SD-WAN members. C. It uses templates to configure SD-WAN on managed devices. D. It is enabled or disabled on a per-ADOM basis.

Discussion 0

Correct Answer: C,D Vote an answer