Free Fortinet NSE6_SDW_AD-7.6 Exam Questions

Question 1

Refer to the exhibits.You use FortiManager to manage the branch devices and configure the SD-WAN template. You have configured direct internet access (DIA) for the IT department users. Now. you must configure secure internet access (SIA) for all local LAN users and have set the firewall policies as shown in the second exhibit. Then, when you use the install wizard to install the configuration and the policy package on the branch devices, FortiManager reports an error as shown in the third exhibit. Which statement describes why FortiManager could not install the configuration on the branches?

A : You must direct SIA traffic to a VPN tunnel.

B : You cannot install firewall policies that reference an SD-WAN zone.

C : You cannot install firewall policies that reference an SD-WAN member.

D : You cannot install SIA and DIA rules on the same device.

Answer: C

Question 2

Your FortiGate is in production. To optimize WAN link use and improve redundancy, you enable and configure SD-WAN. What must you do as part of this configuration update process?

A : Replace references to interfaces used as SD-WAN members in the routing configuration.

B : Purchase and install the SD-WAN license, and reboot the FortiGate device.

C : Replace references to interfaces used as SD-WAN members in the firewall policies.

D : Disable the interface that you want to use as an SD-WAN member.

Answer: C

Question 3

Refer to the exhibits.You use FortiManager to manage the branch devices and configure the SD-WAN template. You have configured direct internet access (DIA) for the IT department users. Now. you must configure secure internet access (SIA) for all local LAN users and have set the firewall policies as shown in the second exhibit. Then, when you use the install wizard to install the configuration and the policy package on the branch devices, FortiManager reports an error as shown in the third exhibit. Which statement describes why FortiManager could not install the configuration on the branches?

A : You must direct SIA traffic to a VPN tunnel.

B : You cannot install firewall policies that reference an SD-WAN zone.

C : You cannot install firewall policies that reference an SD-WAN member.

D : You cannot install SIA and DIA rules on the same device.

Answer: C

Question 4

What are three key routing principles of SD-WAN? (Choose three.)

A : Directly connected routes have precedence over SD-WAN rules.

B : Policy routes have precedence over SD-WAN rules.

C : SD-WAN rules are skipped if the best route to the destination is a static route

D : SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.

E : SD-WAN members are skipped if they do not have a valid route to the destination.

Answer: B,D,E

Question 5

(You want to configure two static routes: one that references an SD-WAN zone and a second one that references an SD-WAN member that belongs to that zone. Which statement about this scenario is true? Choose one answer.)

A : You cannot create static routes for individual SD-WAN members.

B : You cannot create static routes that reference an SD-WAN zone.

C : The destination subnets must be different.

D : The source subnets must be different.

Answer: C