Practice NSE7_SDW-7.0 Exam Online

Question 1

Which are three key routing principles in SD-WAN? (Choose three.)

A : FortiGate performs route lookups for new sessions only

B : Regular policy routes have precedence over SD-WAN rules.

C : SD-WAN rules have precedence over ISDB routes.

D : By default, SD-WAN members are skipped if they do not have a valid route to the destination.

E : By default, SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member

Answer: B,C,E

Question 2

Refer to the exhibit.

Based on the output, which two conclusions are true? (Choose two.)

A : There is more than one SD-WAN rule configured.

B : The SD-WAN rules take precedence over regular policy routes.

C : The all_rules rule represents the implicit SD-WAN rule.

D : Entry 1(id=1) is a regular policy route.

Answer: A,D

Question 3

Refer to the exhibit.

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups. Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)

A : London generates an IKE information message that contains the Toronto public IP address.

B : Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.

C : Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.

D : The first packets from Toronto to London are routed through Hub 1 then to Hub 2.

Answer: B,D

Question 4

What are two benefits of using the Internet service database (ISDB) in an SD-WAN rule? (Choose two.)

A : The ISDB is dynamically updated and reduces administrative overhead

B : The ISDB requires application control to maintain signatures and perform load balancing.

C : The ISDB applies rules to traffic from specific sources, based on application type.

D : The ISDB contains the IP addresses and port ranges of well-known internet services.

Answer: A,D

Question 5

Refer to the exhibit.

Which conclusion about the packet debug flow output is correct?

A : The total number of daily sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

B : The packet size exceeded the outgoing interface MTU

C : The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the traffic shaper, and the packet was dropped.

D : The number of concurrent sessions for 10.1.10.1 exceeded the maximum number of concurrent sessions configured in the firewall policy, and the packet was dropped.

Answer: C

Name:	Fortinet NSE 7 - SD-WAN 7.0
Exam Code:	NSE7_SDW-7.0
Certification:	NSE 7 Network Security Architect
Vendor:	Fortinet
Total Questions:	64
Last Updated:	Apr 24, 2024

Fortinet NSE7_SDW-7.0