Free Fortinet NSE7_SSE_AR-26 Exam Questions

Become Fortinet Certified with updated NSE7_SSE_AR-26 exam questions and correct answers

Page: 1 / 23

Total 111 Questions | Updated On: Oct 22, 2026

Add To Cart

Question 1

You configured an SD-WAN rule with the best quality strategy and selected the predefined health check,Default_FortiGuard, to check the link performances against FortiGuard servers. For the quality criteria, youselected Custom-profile-1. Which factors does FortiGate use, and in which order. to determine the link that itshould use to steer the traffic?

A : Latency – Member configuration order – Link cost threshold

B : Link quality index – Member configuration order – Link cost threshold

C : Links that meet the SLA targets – Member configuration order – Member local cost

D : Latency – Jitter - Packet loss – Bibandwidth – Member configuration order

Answer: B

Question 2

You are planning a large SD-WAN deployment with approximately 1000 spokes and want to allow ADVPNbetween the spokes. Some remote sites use FortiSASE to connect to the company ' s SD-WAN hub. Whichoverlay routing configuration should you use?

A : BGP on loopback with dynamic BGP for ADVPN shortcut routing.

B : BGP on loopback with IPsec phase 2 selectors for ADVPN shortcut routing.

C : BGP per overlay with dynamic BGP for ADVPN shortcut routing.

D : BGP per overlay with BGP next-hop convergence for ADVPN shortcut routing.

Answer: A

Question 3

You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each ofthese zones. One SD-WAN member is no longer in use in health checks and SD-WAN rules.You want to delete it.What happens if you delete the SD-WAN member from the FortiGate GUI?

A : FortiGate accepts the deletion and removes routes as required.

B : FortiGate displays an error message. You must use the CLI to delete an SD-WAN member.

C : FortiGate displays an error message. SD-WAN zones must contain at least two members

D : FortiGate accepts the deletion and places the member in the default SD-WAN zone.

Answer: A

Question 4

The FortiGate devices are managed by FortiManager, and are configured for direct internet access (DIA). Youconfirm that DIA is working as expected for each branch, and check the SD-WAN zone configuration andfirewall policies shown in the exhibits. Then, you use the SD-WAN overlay template to configure the IPsecoverlay tunnels. You create the associated SD-WAN rules to connect existing branches to the company hubdevice and apply the changes on the branches. After those changes, users complain that they lost internetaccess. DIA is no longer working. Based on the exhibit, which statement best describes the possible rootcause of this issue?Exhibit 2Exhibit 3

A : The SD-WAN overlay template defines a zone for each underlay interface and moves the interfaces into those zones.

B : The SD-WAN overlay template didn’t configure a firewall policy to allow traffic through the overlay.

C : The SD-WAN overlay template redefines the interface gateway addresses if they are defined with metadata variables.

D : The SD-WAN overlay template updates the SD-WAN template and the rules.

Answer: A

Question 5

In which order does FortiGate consider the following elements during the route lookup process? Choose oneanswer.

A : SD-WAN rules, ISDB routes, policy routes, BGP routes

B : Policy routes, SD-WAN rules, Internet Service Database (ISDB) routes, BGP routes

C : SD-WAN rules, policy routes, static routes, ISDB routes

D : Policy routes, ISDB routes, SD-WAN rules, static routes

Answer: D

Page: 1 / 23

Total 111 Questions | Updated On: Oct 22, 2026

Add To Cart