Refer to the exhibit. Based on the output, which two conclusions are true? (Choose two.)

There is more than one SD-WAN rule configured.

Entry 1(id=1) is a regular policy route.

There is more than one SD-WAN rule configured.

The SD-WAN rules take precedence over regular policy routes.

The all_rules rule represents the implicit SD-WAN rule.

Entry 1(id=1) is a regular policy route.

What does enabling the exchange-interface-ip setting enable FortiGate devices to exchange?

The IP address of their IPsec interfaces

The gateway address of their IPsec interfaces

The tunnel ID of their IPsec interfaces

The IP address of their IPsec interfaces

The name of their IPsec interfaces

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

The measured bandwidth is less than 100 KBps.

The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.

The traffic shaper drops packets if the bandwidth is less than 2500 KBps.

The measured bandwidth is less than 100 KBps.

The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.

The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.

Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

get router info routing-table all

Which two statements are correct when traffic matches the implicit SD-WAN rule? (Choose two.)

The sdwan_service_id flag in the session information is 0.

Traffic does not match any of the entries in the policy route table.

The sdwan_service_id flag in the session information is 0.

All SD-WAN rules have the default setting enabled.

Traffic does not match any of the entries in the policy route table.

Traffic is load balanced using the algorithm set for the v4-ecmp-mode setting.

Refer to the exhibit. Based on the exhibit, which two actions does FortiGate perform on sessions after a firewall policy change? (Choose two.)

FortiGate does not change existing sessions.

FortiGate evaluates new sessions.

FortiGate flushes all sessions.

FortiGate terminates the old sessions.

FortiGate does not change existing sessions.

FortiGate evaluates new sessions.

Which two statements about SD-WAN central management are true? (Choose two.)

The objects are saved in the ADOM common object database.

It uses templates to configure SD-WAN on managed devices.

The objects are saved in the ADOM common object database.

It does not support meta fields.

It uses templates to configure SD-WAN on managed devices.

It supports normalized interfaces for SD-WAN member configuration.

Refer to the exhibit. Which are two expected behaviors of the traffic that matches the traffic shaper? (Choose two.)

The number of simultaneous connections allowed for each source IP address cannot exceed five connections.

The traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.

The number of simultaneous connections among all source IP addresses cannot exceed five connections.

The traffic shaper limits the combined bandwidth of all connections to a maximum of 5 MB/sec.

The number of simultaneous connections allowed for each source IP address cannot exceed five connections.

The traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.

Which two statements are true about using SD-WAN to steer local-out traffic? (Choose two.)

By default, local-out traffic does not use SD-WAN.

You must configure each local-out feature individually, to use SD-WAN.

FortiGate does not consider the source address of the packet when matching an SD-WAN rule for local-out traffic.

By default, local-out traffic does not use SD-WAN.

By default, FortiGate does not check if the selected member has a valid route to the destination.

You must configure each local-out feature individually, to use SD-WAN.

Refer to the exhibit. Which conclusion about the packet debug flow output is correct?

The original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.

The original traffic exceeded the maximum packets per second of the outgoing interface, and the packet was dropped.

The reply traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.

The original traffic exceeded the maximum bandwidth of the outgoing interface, and the packet was dropped.

The original traffic exceeded the maximum bandwidth configured in the traffic shaper, and the packet was dropped.

What is true about SD-WAN multiregion topologies?

Each region has its own SD-WAN topology

It is not compatible with ADVPN.

Regions must correspond to geographical areas.

Routing between the hub and spokes must be BGP.

In which SD-WAN template field can you use a metadata variable?

All SD-WAN template fields support metadata variables.

You can use metadata variables only to define interface members and the gateway IP.

All SD-WAN template fields support metadata variables.

Any field Identified with a dollar sign ($) in a magnifying glass.

Any field identified with an 'M' in a circle.

Refer to the exhibits. Exhibit A shows a policy package definition Exhibit B shows the install log that the administrator received when he tried to install the policy package on FortiGate devices.Based on the output shown in the exhibits, what can the administrator do to solve the Issue?

Create dynamic mapping for the LAN interface for all devices in the installation target list.

Use a metadata variable instead of a dynamic interface to define the firewall policy.

Dynamic mapping should be done automatically. Review the LAN interface configuration for branch2_fgt.

Policies can refer to only one LAN source interface. Keep only the D-LAN, which is the dynamic LAN interface.

Refer to the exhibit. The exhibit shows output of the command diagnose 3vg sdwan service collected on a FortiGate device.The administrator wants to know through which interface FortiGate will steer the traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a destination of the business application Salesforce located on HO servers 10.0.0.1.Based on the exhibits, which two statements are correct? (Choose two.)

When FortiGate cannot recognize the application of the flow it steers the traffic destined to server 10.0.0.1 according to service rule 3.

FortiGate steers traffic to HO servers according to service rule 1 and it uses port1 or port2 because both interfaces are selected.

When FortiGate cannot recognize the application of the flow it steers the traffic destined to server 10.0.0.1 according to service rule 3.

FortiGate steers traffic to HO servers according to service rule 1 and it uses port1 or port2 because both interfaces are selected.

There is no service defined for the Salesforce application, so FortiGate will use the service rule 3 and steer the traffic through interface T_HQ1.

FortiGate steers traffic for business application according to service rule 2 and steers traffic through port2.

Refer to the exhibit. Which statement about the role of the ADVPN device in handling traffic is true?

This is a spoke that has received an offer from a remote hub.

An IKE session is established between 10.0.1.101 and 10.0.2.101 in the process of forming a shortcut tunnel.

This is a hub that has received an offer from a spoke and has forwarded it to another spoke.

Two spokes. 192.2. 1 and 10.0.2.101. establish a shortcut.

This is a spoke that has received an offer from a remote hub.

Fortinet NSE7_SDW-7.2 Practice Test 3 - Free Online Exam Prep & Questions

Refer to the exhibit.

Fortinet NSE7_SDW-7.2 image Question 81 27281 09182024190937000000

Exhibit A shows the firewall policy and exhibit B shows the traffic shaping policy.

The traffic shaping policy is being applied to all outbound traffic; however, inbound traffic is not being evaluated by the shaping policy.

Based on the exhibits, what configuration change must be made in which policy so that traffic shaping can be applied to inbound traffic?

Become a Premium Member for full access

Unlock Premium Member

Fortinet NSE7_SDW-7.2 Practice Test 3

Question

Fortinet NSE7_SDW-7.2 Practice Tests

Practice Tests