Free Online Fortinet NSE7_SDW-7.2 Practice Test

Prepare Your Fortinet NSE7_SDW-7.2 Exam Questions with Free online NSE7_SDW-7.2 Practice Test. Get Brilliant Fortinet NSE 7 - SD-WAN 7.2 Exam Results with Valid NSE7 SDW 7.2 Exam Dumps.

Page: 1 / 17

Total 81 Questions | Updated On: Apr 25, 2024

Question 1

What does enabling theexchange-interface-ipsetting enable FortiGate devices to exchange?

A : The gateway address of their IPsec interfaces

B : The tunnel ID of their IPsec interfaces

C : The IP address of their IPsec interfaces

D : The name of their IPsec interfaces

Answer: C

Question 2

In a hub-and-spoke topology, what are two advantages of enabling ADVPN on the IPsec overlays? (Choose two.)

A : It provides the benefits of a full-mesh topology in a hub-and-spoke network.

B : It provides direct connectivity between spokes by creating shortcuts.

C : It enables spokes to bypass the hub during shortcut negotiation.

D : It enables spokes to establish shortcuts to third-party gateways.

Answer: A,B

Question 3

Refer to the exhibit.

Which statement about the role of the ADVPN device in handling traffic is true?

A : This is a spoke that has received a query from a remote hub and has forwarded the response to its hub.

B : Two hubs,10.0.1.101and10.0.2.101, are receiving and forwarding queries between each other.

C : This is a hub that has received a query from a spoke and has forwarded it to another spoke.

D : Two spokes,192.2.0.1and10.0.2.101, forward their queries to their hubs.

Answer: C

Question 4

Refer to the exhibits.

Exhibit A -

Exhibit B -

Exhibit A shows a site-to-site topology between two FortiGate devices: branch1_fgt and dc1_fgt. Exhibit B

shows the system global and system settings configuration on dc1_fgt.

When branch1_client establishes a connection to dc1_host, the administrator observes that, on dc1_fgt, the

reply traffic is routed over T_INET_0_0, even though T_INET_1_0 is the preferred member in the matching

SD-WAN rule.

Based on the information shown in the exhibits, what configuration change must be made on dc1_fgt so

dc1_fgt routes the reply traffic over T_INET_1_0?

A : Enable auxiliary-session under config system settings.

B : Disable tp-session-without-syn under config system settings.

C : Enable snat-route-change under config system global.

D : Disable allow-subnet-overlap under config system settings.

Answer: A

Question 5

In the default SD-WAN minimum configuration, which two statements are correct when traffic matches the default implicit SD-WAN rule? (Choose two )

A : Traffic has matched none of the FortiGate policy routes.

B : Matched traffic failed RPF and was caught by the rule.

C : The FIB lookup resolved interface was the SD-WAN interface.

D : An absolute SD-WAN rule was defined and matched traffic.

Answer: A,C

Page: 1 / 17

Total 81 Questions | Updated On: Apr 25, 2024