NSE7_SDW-7.0 Fortinet Exam Questions and Free Practice Test

Question 7

What are two reasons why FortiGate would be unable to complete the zero-touch provisioning process? (Choose two.)

A. The FortiGate cloud key has not been added to the FortiGate cloud portal.

B. FortiDeploy has connected with FortiGate and provided the initial configuration to contact FortiManager

C. The zero-touch provisioning process has completed internally, behind FortiGate.

D. FortiGate has obtained a configuration from the platform template in FortiGate cloud.

E. A factory reset performed on FortiGate.

Correct Answer:AC

Question 8

Which best describes the SD-WAN traffic shaping mode that bases itself on a percentage of available
bandwidth?

A. Interface-based shaping mode

B. Reverse-policy shaping mode

C. Shared-policy shaping mode

D. Per-IP shaping mode

Correct Answer:A
Interface-based shaping goes further, enabling traffic controls based on percentage of the interface bandwidth.

Question 9

Refer to the exhibit.
NSE7_SDW-7.0 dumps exhibit
Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

A. The type of traffic defined and allowed on firewall policy ID 1 is UDP.

B. FortiGate has terminated the session after a change on policy ID 1.

C. Changes have been made on firewall policy ID 1 on FortiGate.

D. Firewall policy ID 1 has source NAT disabled.

Correct Answer:C

Question 10

Which two settings can you configure to speed up routing convergence in BGP? (Choose two.)

A. update-source

B. set-route-tag

C. holdtime-timer

D. link-down-failover

Correct Answer:CD

Question 11

Refer to the exhibit.
NSE7_SDW-7.0 dumps exhibit
An administrator is troubleshooting SD-WAN on FortiGate. A device behind branch1_fgt generates traffic to the 10.0.0.0/8 network. The administrator expects the traffic to match SD-WAN rule ID 1 and be routed over T_INET_0_0. However, the traffic is routed over T_INET_1_0.
Based on the output shown in the exhibit, which two reasons can cause the observed behavior? (Choose two.)

A. The traffic matches a regular policy route configured with T_INET_1_0 as the outgoing device.

B. T_INET_1_0 has a lower route priority value (higher priority) than T_INET_0_0.

C. T_INET_0_0 does not have a valid route to the destination.

D. T_INET_1_0 has a higher member configuration priority than T_INET_0_0.

Correct Answer:AC

START NSE7_SDW-7.0 EXAM