NSE7_SDW Practice Test 1 — 10 Questions

Question 1

When using SD-WAN templates, which option allows you to manage different ISPs on different branches within the same template?

Accepted Answer

Dynamic Mapping. Dynamic mapping allows you to associate the 'WAN' member in the template to 'port1' on one branch and 'wan1' on another.

Answer

Global Objects

Answer

Device Groups

Answer

SD-WAN Rules

Question 2

Which interface can be used as an SD-WAN member in an SD-WAN template?

Accepted Answer

Physical ports, VLANs, and VPN tunnels. Any physical or logical (VPN tunnel) interface can be added as an SD-WAN member.

Answer

Only WAN physical ports

Answer

Only VLANs

Answer

Only loopback interfaces

Question 3

How do you apply an SD-WAN template to multiple managed FortiGates simultaneously?

Accepted Answer

By assigning the template in the Device Manager tab. In the Device Manager tab, you can assign an SD-WAN template to multiple devices by selecting them and applying the template.

Answer

By manually editing each FortiGate config

Answer

Through individual CLI console sessions

Answer

By creating a global profile

Question 4

You want to standardize the SD-WAN configuration for 50 remote branch offices. Which FortiManager feature should you use?

Accepted Answer

SD-WAN Templates. SD-WAN templates are specifically designed for mass deployment of standardized configurations.

Answer

Policy Packages

Answer

Firmware Images

Answer

CLI Scripts

Question 5

When configuring SD-WAN in FortiManager, why would you use 'Shared Objects'?

Accepted Answer

To enable reuse of configuration elements across different templates. Shared objects allow you to define parameters like health check servers once and reuse them across multiple templates, simplifying updates.

Answer

To increase the number of VDOMs supported

Answer

To allow FortiGates to share logs

Answer

To create a site-to-site VPN

Question 6

An administrator implements BGP over SD-WAN tunnels to a cloud provider. The cloud provider requires BGP MD5 authentication on all peering sessions. Where is BGP MD5 authentication configured on the FortiGate?

Accepted Answer

Under the router bgp neighbor configuration block in the CLI. BGP authentication passwords (such as MD5) are configured within the BGP neighbor configuration under router bgp in the FortiOS CLI.

Answer

Within the firewall policy authentication settings

Answer

Under the IPsec phase 1 interface advanced settings

Answer

Inside the SD-WAN health check probe configuration

Question 7

If an SD-WAN template contains a reference to an interface that does not exist on a target FortiGate, what occurs during the installation process?

Accepted Answer

The installation fails with a configuration error. The installation will fail during the pre-check or push validation phase because the dependency is missing.

Answer

The FortiGate automatically creates a dummy interface

Answer

The installation proceeds and ignores the missing interface

Answer

The FortiGate enters an 'Emergency' state

Question 8

Which object must be created before assigning a health check to an SD-WAN service rule in an SD-WAN template?

Accepted Answer

An SD-WAN Health Check. Health checks must be defined within the template configuration to be usable in SD-WAN rules.

Answer

A routing protocol

Answer

A firewall address object

Answer

An SD-WAN Zone

Question 9

What is required before FortiManager can display SD-WAN monitoring data?

Accepted Answer

The FortiGate must be sending logs to FortiManager. FortiManager must be configured to receive logs from the FortiGate, and 'Log to FortiManager' must be enabled on the FortiGate.

Answer

The FortiGate must have a cloud license

Answer

The FortiGate must be running a specific firmware

Answer

The FortiGate must be in Transparent mode

Question 10

When viewing the SD-WAN Monitor in FortiManager, what information is provided for the 'Health Check' status?

Accepted Answer

Latency, jitter, and packet loss metrics. The monitor shows the latency, jitter, and packet loss for every configured health check probe on the monitored device.

Answer

The firmware version of the device

Answer

The number of active users

Answer

The current IP address of the interface