Online NSE7_SDW-7.2 Practice TestMore Fortinet Products >

Free Fortinet NSE7_SDW-7.2 Exam Dumps Questions

Fortinet NSE7_SDW-7.2: Fortinet NSE 7 - SD-WAN 7.2

- Get instant access to NSE7_SDW-7.2 practice exam questions

- Get ready to pass the Fortinet NSE 7 - SD-WAN 7.2 exam right now using our Fortinet NSE7_SDW-7.2 exam package, which includes Fortinet NSE7_SDW-7.2 practice test plus an Fortinet NSE7_SDW-7.2 Exam Simulator.

- The best online NSE7_SDW-7.2 exam study material and preparation tool is here.

4.5

(6405 ratings)

Question 1

Which diagnostic command can you use to show the SD-WAN rules, interface information, and state?

A. diagnose sys sdwan service

B. diagnose sys sdwan route-tag-list

C. diagnose sys sdwan member

D. diagnose sys sdwan neighbor

Correct Answer:A

Question 2

Refer to the exhibit.
NSE7_SDW-7.2 dumps exhibit
Which algorithm does SD-WAN use to distribute traffic that does not match any of the SD- WAN rules?

A. All traffic from a source IP to a destination IP is sent to the same interface.

B. All traffic from a source IP is sent to the same interface.

C. All traffic from a source IP is sent to the most used interface.

D. All traffic from a source IP to a destination IP is sent to the least used interface.

Correct Answer:A
Study Guide 7.2, page 176.

Question 3

Refer to the exhibit.
NSE7_SDW-7.2 dumps exhibit
Based on the exhibit, which two actions does FortiGate perform on traffic passing through port2? (Choose two.)

A. FortiGate does not change the routing information on existing sessions that use a valid gateway, after a route change.

B. FortiGate performs routing lookups for new sessions only, after a route change.

C. FortiGate always blocks all traffic, after a route change.

D. FortiGate flushes all routing information from the session table, after a route change.

Correct Answer:AB

Question 4

What are two benefits of using the Internet service database (ISDB) in an SD-WAN rule? (Choose two.)

A. The ISDB is dynamically updated and reduces administrative overhead.

B. The ISDB requires application control to maintain signatures and perform load balancing.

C. The ISDB applies rules to traffic from specific sources, based on application type.

D. The ISDB contains the IP addresses and port ranges of well-known internet services.

Correct Answer:AD

Question 5

What are two advantages of using an IPsec recommended template to configure an IPsec tunnel in an hub-and-spoke topology? (Choose two.)

A. It ensures consistent settings between phase1 and phase2.

B. It guides the administrator to use Fortinet recommended settings.

C. It automatically install IPsec tunnels to every spoke when they are added to the FortiManager ADOM.

D. The VPN monitor tool provides additional statistics for tunnels defined with an IPsec recommended template.

Correct Answer:AB
The use of an IPsec recommended template offers the advantage of ensuring consistent settings between phase1 and phase2 (A), which is essential for the stability and security of the IPsec tunnel. Additionally, it guides the administrator to use Fortinet's recommended settings (B), which are designed to optimize performance and security based on Fortinet's best practices. References: The benefits of using IPsec recommended templates are outlined in Fortinet's SD-WAN documentation, which emphasizes the importance of consistency and adherence to recommended configurations.

Question 6

Which two statements about SD-WAN central management are true? (Choose two.)

A. It does not allow you to monitor the status of SD-WAN members.

B. It is enabled or disabled on a per-ADOM basis.

C. It is enabled by default.

D. It uses templates to configure SD-WAN on managed devices.

Correct Answer:BD

START NSE7_SDW-7.2 EXAM