Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

NSE7-SDW-7-2 by Fortinet - Page 1 | ExamCademy

Mode Selection

Sort:

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

That's the end of the Preview

Create a free account to unlock all questions for this exam.

Log In / Sign Up

Page 1 of 3 • Questions 1-25 of 70

1 2 3

→

Know a question that should be here? Contribute to this exam

Which are three key routing principles in SD-WAN? (Choose three.)

A By default. SD-WAN members are skipped if they do not have a valid route to the destination.
B By default. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.
C FortiGate performs route lookups for new sessions only.
D SD-WAN rules have precedence over ISDB routes.
E Regular policy routes have precedence over SD-WAN rules.

Refer to the exhibit.

Question Image

A FortiGate does not change the routing information on existing sessions that use a valid gateway, after a route change.
B FortiGate always blocks all traffic, after a route change.
C FortiGate performs routing lookups for new sessions only, after a route change.
D FortiGate flushes all routing information from the session table, after a route change.

What are two advantages of using an IPsec recommended template to configure an IPsec tunnel in an hub-and-spoke topology? (Choose two.)

A It ensures consistent settings between phase1 and phase2.
B It guides the administrator to use Fortinet recommended settings.
C The VPN monitor tool provides additional statistics for tunnels defined with an IPsec recommended template.
D It automatically install IPsec tunnels to every spoke when they are added to the FortiManager ADOM.

Refer to the exhibit.

Question Image

The exhibit shows the BGP configuration on the hub in a hub-and-spoke topology. The administrator wants BGP to advertise prefixes from spokes to other spokes over the IPsec overlays, including additional paths. However, when looking at the spoke routing table, the administrator does not see the prefixes from other spokes and the additional paths.
Based on the exhibit, which three settings must the administrator configure inside each BGP neighbor group so spokes can learn other spokes prefixes and their additional paths? (Choose three.)

A Enable soft-reconfiguration
B Enable route-reflector-client
C Set additional-path to send
D Set adv-additional-path to the number of additional paths to advertise
E Set advertisement-interval to the number of additional paths to advertise

In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

A It provides the benefits of a full-mesh topology in a hub-and-spoke network.
B It enables spokes to establish shortcuts to third-party gateways.
C It provides direct connectivity between spokes by creating shortcuts.
D It enables spokes to bypass the hub during shortcut negotiation.

Refer to the exhibit.

Question Image

The exhibit shows output of the command diagnose sys sdwan service collected on a FortiGate device.
The administrator wants to know through which interface FortiGate will steer the traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a destination of the business application Salesforce located on HQ servers 10.0.0.1.
Based on the exhibits, which two statements are correct? (Choose two.)

A There is no service defined for the Salesforce application, so FortiGate will use the service rule 3 and steer the traffic through interface T_HQ1.
B FortiGate steers traffic to HQ servers according to service rule 1 and it uses port1 or port2 because both interfaces are selected.
C When FortiGate cannot recognize the application of the flow it steers the traffic destined to server 10.0.0.1 according to service rule 3.
D FortiGate steers traffic for business application according to service rule 2 and steers traffic through port2.

Which CLI command do you use to perform real-time troubleshooting for ADVPN negotiation?

A get router info routing-table all
B get ipsec tunnel list
C diagnose vpn tunnel list
D diagnose debug application ike

Refer to the exhibit.

Question Image

Two hub-and-spoke groups are connected through a site-to-site IPsec VPN between Hub 1 and Hub 2.
Which two configuration settings are required for Toronto and London spokes to establish an ADVPN shortcut? (Choose two.)

A On the hubs, net-device must be enabled on all IPsec VPNs.
B auto-discovery-forwarder must be enabled on all IPsec VPNs.
C On the spokes, auto-discovery-receiver must be enabled on the IPsec VPN to the hub.
D On the hubs, auto-discovery-sender must be enabled on the IPsec VPNs to spokes.

What are two common use cases for remote internet access (RIA)? (Choose two.)

A Provide internet access through the hub.
B Centralize security inspection on the hub.
C Provide thorough inspection on spokes.
D Provide direct internet access on spokes.

Refer to the exhibits.
Exhibit A.

Question Image

Exhibit B.

Question Image

An administrator is testing application steering in SD-WAN. Before generating test traffic, the administrator collected the information shown in exhibit A.
After generating GoToMeeting test traffic, the administrator examined the respective traffic log on FortiAnalyzer, which is shown in exhibit B. The administrator noticed that the traffic matched the implicit SD-WAN rule, but they expected the traffic to match rule ID 1.
Which two reasons explain why some log messages show that the traffic matched the implicit SD-WAN rule? (Choose two.)

A Port1 and port2 do not have a valid route to the destination.
B The session 3-tuple did not match any of the existing entries in the ISDB application cache.
C Full SSL inspection is not enabled on the matching firewall policy.
D FortiGate did not refresh the routing information on the session after the application was detected.

Which diagnostic command can you use to show the configured SD-WAN zones and their assigned members?

A diagnose sys sdwan member
B diagnose sys sdwan interface
C diagnose sys sdwan zone
D diagnose sys sdwan service

Which statement is correct about SD-WAN and ADVPN?

A SD-WAN can steer traffic to ADVPN shortcuts only for rules defined with strategy manual or best quality.
B SD-WAN does not monitor the health and performance of ADVPN shortcuts.
C SD-WAN cannot steer traffic to ADVPN shortcuts established over IPSec overlays if the zone contains physical interfaces.
D SD-WAN can steer traffic to ADVPN shortcuts established over IPsec overlays configured as SD-WAN members.

What is a benefit of using application steering in SD-WAN?

A The traffic always skips the regular policy routes.
B You do not need to configure firewall policies that accept the SD-WAN traffic.
C You steer traffic based on the detected application.
D You do not need to enable SSL inspection.

Refer to the exhibit.

Question Image

The exhibit shows the SD-WAN rule status and configuration.
Based on the exhibit, which change in the measured latency will make T_MPLS_0 the new preferred member?

A When T_INET_0_0 has a latency of 250 ms.
B When T_MPLS_0 has a latency of 80 ms.
C When T_INET_0_0 and T_MPLS_0 have the same latency.
D When T_MPLS_0 has a latency of 100 ms.

NSE7-SDW-7-2Preview

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

That's the end of the Preview