Fortinet NSE7_SDW-7.2 Exam Questions - Real Practice Questions for Guaranteed Success

Question 1

Which two statements about SD-WAN central management are true? (Choose two.)

AIt does not allow you to monitor the status of SD-WAN members.

BIt is enabled or disabled on a per-ADOM basis.

CIt is enabled by default.

DIt uses templates to configure SD-WAN on managed devices.

Correct : B, D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AIt does not allow you to monitor the status of SD-WAN members.

BIt is enabled or disabled on a per-ADOM basis.

CIt is enabled by default.

DIt uses templates to configure SD-WAN on managed devices.

0 / 1500

Question 2

What is true about SD-WAN multiregion topologies?

AEach region has its own SD-WAN topology

BIt is not compatible with ADVPN.

CRegions must correspond to geographical areas.

DRouting between the hub and spokes must be BGP.

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AEach region has its own SD-WAN topology

BIt is not compatible with ADVPN.

CRegions must correspond to geographical areas.

DRouting between the hub and spokes must be BGP.

0 / 1500

Question 3

In which SD-WAN template field can you use a metadata variable?

AYou can use metadata variables only to define interface members and the gateway IP.

BAll SD-WAN template fields support metadata variables.

CAny field Identified with a dollar sign ($) in a magnifying glass.

DAny field identified with an 'M' in a circle.

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AYou can use metadata variables only to define interface members and the gateway IP.

BAll SD-WAN template fields support metadata variables.

CAny field Identified with a dollar sign ($) in a magnifying glass.

DAny field identified with an 'M' in a circle.

0 / 1500

Question 4

Refer to the exhibits.

Exhibit A shows a policy package definition Exhibit B shows the install log that the administrator received when he tried to install the policy package on FortiGate devices.

Based on the output shown in the exhibits, what can the administrator do to solve the Issue?

ACreate dynamic mapping for the LAN interface for all devices in the installation target list.

BUse a metadata variable instead of a dynamic interface to define the firewall policy.

CDynamic mapping should be done automatically. Review the LAN interface configuration for branch2_fgt.

DPolicies can refer to only one LAN source interface. Keep only the D-LAN, which is the dynamic LAN interface.

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ACreate dynamic mapping for the LAN interface for all devices in the installation target list.

BUse a metadata variable instead of a dynamic interface to define the firewall policy.

CDynamic mapping should be done automatically. Review the LAN interface configuration for branch2_fgt.

DPolicies can refer to only one LAN source interface. Keep only the D-LAN, which is the dynamic LAN interface.

0 / 1500

Question 5

Refer to the exhibit.

The exhibit shows output of the command diagnose 3vg sdwan service collected on a FortiGate device.

The administrator wants to know through which interface FortiGate will steer the traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a destination of the business application Salesforce located on HO servers 10.0.0.1.

Based on the exhibits, which two statements are correct? (Choose two.)

AWhen FortiGate cannot recognize the application of the flow it steers the traffic destined to server 10.0.0.1 according to service rule 3.

BFortiGate steers traffic to HO servers according to service rule 1 and it uses port1 or port2 because both interfaces are selected.

CThere is no service defined for the Salesforce application, so FortiGate will use the service rule 3 and steer the traffic through interface T_HQ1.

DFortiGate steers traffic for business application according to service rule 2 and steers traffic through port2.

Correct : A, B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AWhen FortiGate cannot recognize the application of the flow it steers the traffic destined to server 10.0.0.1 according to service rule 3.

BFortiGate steers traffic to HO servers according to service rule 1 and it uses port1 or port2 because both interfaces are selected.

CThere is no service defined for the Salesforce application, so FortiGate will use the service rule 3 and steer the traffic through interface T_HQ1.

DFortiGate steers traffic for business application according to service rule 2 and steers traffic through port2.

0 / 1500

Master Fortinet NSE7_SDW-7.2 Exam with Reliable Practice Questions

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: