NSE7_SDW-7.2 Fortinet Exam Questions and Free Practice Test

Question 13

Refer to the exhibits.
Exhibit A
NSE7_SDW-7.2 dumps exhibit
Exhibit B -

Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status.
The administrator wants to understand the expected behavior for traffic matching the SD- WAN rule.
Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?

A. The traffic will be load balanced across all three overlays.

B. The traffic will be routed over T_INET_0_0.

C. The traffic will be routed over T_MPLS_0.

D. The traffic will be routed over T_INET_1_0.

Correct Answer:C

Question 14

What are two common use cases for remote internet access (RIA)? (Choose two.)

A. Provide direct internet access on spokes

B. Provide internet access through the hub

C. Centralize security inspection on the hub

D. Provide thorough inspection on spokes

Correct Answer:BC
* B. Provide internet access through the hub: This involves routing branch or remote office internet traffic through a central hub, ensuring consistent security policies and possibly better management of network resources.
* C. Centralize security inspection on the hub: With this approach, all internet-bound traffic from various spokes is inspected at the hub, leveraging centralized security mechanisms for thorough inspection and policy enforcement.

Question 15

Refer to the exhibit.
NSE7_SDW-7.2 dumps exhibit
Which are two expected behaviors of the traffic that matches the traffic shaper? (Choose two.)

A. The number of simultaneous connections among all source IP addresses cannot exceed five connections.

B. The traffic shaper limits the combined bandwidth of all connections to a maximum of 5 MB/sec.

C. The number of simultaneous connections allowed for each source IP address cannot exceed five connections.

D. The traffic shaper limits the bandwidth of each source IP address to a maximum of 625 KB/sec.

Correct Answer:CD

Question 16

Refer to the exhibit.
NSE7_SDW-7.2 dumps exhibit
Which configuration change is required if the responder FortiGate uses a dynamic routing protocol to exchange routes over IPsec?

A. type must be set to static.

B. mode-cfg must be enabled.

C. exchange-interface-ip must be enabled.

D. add-route must be disabled.

Correct Answer:D

Question 17

Refer to the exhibits.
Exhibit A
NSE7_SDW-7.2 dumps exhibit
Exhibit B

Exhibit A shows an SD-WAN event log and exhibit B shows the member status and the SD-WAN rule configuration.
Based on the exhibits, which two statements are correct? (Choose two.)

A. FortiGate updated the outgoing interface list on the rule so it prefers port2.

B. Port2 has the highest member priority.

C. Port2 has a lower latency than port1.

D. SD-WAN rule ID 1 is set to lowest cost (SLA) mode.

Correct Answer:AC

Question 18

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2. The administrator configured ADVPN on both hub-and-spoke groups.
NSE7_SDW-7.2 dumps exhibit
Which two outcomes are expected if a user in Toronto sends traffic to London? (Choose two.)

A. London generates an IKE information message that contains the Toronto public IP address.

B. Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.

C. Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.

D. The first packets from Toronto to London are routed through Hub 1 then to Hub 2.

Correct Answer:BD

START NSE7_SDW-7.2 EXAM