Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

NSE7_SDW-64 by Fortinet - Page 1 | ExamCademy

Mode Selection

Question 1

Question 2

Question 3

Which diagnostic command can you use to show the SD-WAN rules interface information and state?

A diagnose sys virtual-wan-link route-tag-list.
B diagnose sys virtual-wan-link service.
C diagnose sys virtual-wan-link member.
D diagnose sys virtual-wan-link neighbor.

Question 4

Refer to exhibits.

Question Image

Exhibit A shows the source NAT global setting and exhibit B shows the routing table on FortiGate.
Based on the exhibits, which two statements about increasing the port2 interface priority to 20 are true? (Choose two.)

A All the existing sessions that do not use SNAT will be flushed and routed through port1.
B All the existing sessions will continue to use port2, and new sessions will use port1.
C All the existing sessions using SNAT will be flushed and routed through port1.
D All the existing sessions will be blocked from using port1 and port2.

Question 5

Refer to exhibits.

Question Image

Exhibit A shows the SD-WAN rules and exhibit B shows the traffic logs. The SD-WAN traffic logs reflect how FortiGate processed traffic.
Which two statements about how the configured SD-WAN rules are processing traffic are true? (Choose two.)

A The implicit rule overrides all other rules because parameters widely cover sources and destinations.
B SD-WAN rules are evaluated in the same way as firewall policies: from top to bottom.
C The All_Access_Rules rule load balances Vimeo application traffic among SD-WAN member interfaces.
D The initial session of an application goes through a learning phase in order to apply the correct rule.

Question 6

Which two statements describe how IPsec phase 1 main mode id different from aggressive mode when performing IKE negotiation? (Choose two.)

A A peer ID is included in the first packet from the initiator, along with suggested security policies.
B XAuth is enabled as an additional level of authentication, which requires a username and password.
C A total of six packets are exchanged between an initiator and a responder instead of three packets.
D The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance.

Question 7

What would best describe the SD-WAN traffic shaping mode that bases itself on a percentage of available bandwidth?

A Per-IP shaping mode
B Shared policy shaping mode
C Interface-based shaping mode
D Reverse policy shaping mode

Question 8

What is the lnkmtd process responsible for?

A Flushing route tags addresses
B Monitoring links for any bandwidth saturation
C Logging interface quality information
D Processing performance SLA probes

Question 9

What are two roles that SD-WAN orchestrator plays when it works with FortiManager? (Choose two.)

A It configures and monitors SD-WAN networks on FortiGate devices that are managed by FortiManager.
B It acts as a standalone device to assist FortiManager to manage SD-WAN interfaces on the managed FortiGate devices.
C It acts as a hub FortiGate with an SD-WAN interface enabled and managed along with other FortiGate devices by FortiManager.
D It acts as an application that is released and signed by Fortinet to run as a part of management extensions on FortiManager.

Question 10

Refer to the exhibit.

Question Image

Which statement about the ADVPN device role in handling traffic is true?

A This is a spoke that has received a query from a remote hub and has forwarded the response to its hub.
B Two hubs, 10.1.1.254 and 10.1.2.254, are receiving and forwarding queries between each other.
C Two spokes, 100.64.3.1 and 10.1.2.254, forward their queries to their hubs.
D This is a hub that has received a query from a spoke and has forwarded it to another spoke.

Question 11

Refer to the exhibit.

Question Image

Based on the output, which two conclusions are true? (Choose two.)

A The all_rules rule represents the implicit SD-WAN rule.
B There is more than one SD-WAN rule configured.
C Entry 1 (id=1) is a regular policy route.
D The SD-WAN rules takes precedence over regular policy routes.

Question 12

In which two ways does FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning? (Choose two.)

A From a FortiGuard definitions update
B From the central management configuration configured in FortiDeploy
C From a DHCP server configured with options 240 or 241
D From another FortiGate device in the same local network

Question 13

Refer to exhibits.

Question Image

Exhibit A, which shows the SD-WAN performance SLA and exhibit B shows the health of the participating SD-WAN members.
Based on the exhibits, which statement is correct?

A The dead member interface stays unavailable until an administrator manually brings the interface back.
B Port2 needs to wait 500 milliseconds to change the status from alive to dead.
C Static routes using port2 are active in the routing table.
D FortiGate has not received three consecutive requests from the SLA server configured for port2.

Question 14

Refer to the exhibit.

Question Image

Which two conclusions for traffic that matches the traffic shaper are true? (Choose two.)

A The traffic shaper drops packets if the bandwidth exceeds 6250 KBps.
B The traffic shaper limits the bandwidth of each source IP to a maximum of 6250 KBps.
C The traffic shaper drops packets if the bandwidth is less than 2500 KBps.
D The measured bandwidth is less than 100 KBps.

That's the end of the Preview

Create a free account to unlock all questions for this exam.

Log In / Sign Up

Page 1 of 3 • Questions 1-25 of 68

1 2 3

→

Know a question that should be here? Contribute to this exam

Which three parameters are available to configure SD-WAN rules? (Choose three.)

A Application signatures
B URL categories
C Internet service database (ISDB) address object
D Source and destination IP address
E Type of physical link connection

Refer to the exhibit.

Question Image

Multiple IPsec VPNs are formed between two hub-and-spokes groups, and site-to-site between Hub 1 and Hub 2. The administrator configured ADVPN on the dual regions topology.
Which two statements are correct if a user in Toronto sends traffic to London? (Choose two.)

A Toronto needs to establish a site-to-site tunnel with Hub 2 to bypass Hub 1.
B The first packets from Toronto to London are routed through Hub 1 then to Hub 2.
C London generates an IKE information message that contains the Toronto public IP address.
D Traffic from Toronto to London triggers the dynamic negotiation of a direct site-to-site VPN.

NSE7_SDW-64Preview

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

That's the end of the Preview