NSE7_SDW Practice Test 8 — 10 Questions

Question 1

Which TWO of the following are necessary to enable SD-WAN on a FortiGate?

Accepted Answer

Creating at least one SD-WAN rule.. SD-WAN is enabled by adding members to an SD-WAN zone and configuring rules.

Answer

Enabling SD-WAN in the Feature Visibility menu.

Answer

Updating the FortiGuard database.

Answer

Configuring a BGP peer.

Question 2

An administrator configures an SD-WAN health check with multiple probes (e.g., ping and HTTP) to monitor a set of IPsec VPN tunnels. Which THREE criteria or settings govern how FortiOS determines whether an SD-WAN member has met or failed the performance SLA? (Choose three)

Accepted Answer

The restoretime parameter, which specifies how many consecutive successful probes are required before restoring a failed member to healthy status. FortiOS SD-WAN health check SLA criteria evaluate packet loss, jitter, latency, and threshold failures. When multiple criteria or probes are used, settings such as latency-threshold, packet-loss-threshold, jitter-threshold, and failtime/restoretime determine state transitions.

Answer

The BGP AS number assigned to the WAN interface gateway

Answer

The physical cable length calculated in meters between the FortiGate and the nearest ISP switch

Question 3

When configuring an SD-WAN rule, what is the purpose of the 'Source' address field?

Accepted Answer

To match traffic based on the source IP or user.. The 'Source' field allows you to selectively apply SD-WAN rules based on specific traffic origins, such as a subnet or user group.

Answer

To define the gateway IP for the route.

Answer

To force traffic to a specific SD-WAN zone.

Answer

To determine which ISP the traffic exits through regardless of SLA.

Question 4

Which THREE of the following are benefits of using SD-WAN?

Accepted Answer

Simplified WAN management through zones.. SD-WAN provides link aggregation, intelligent path selection, and simplified WAN management.

Answer

Built-in physical layer cabling.

Answer

Automatic hardware replacement.

Question 5

You have an SD-WAN rule with 'Priority' strategy. What happens if the highest priority member fails its SLA?

Accepted Answer

Traffic fails over to the member with the next highest priority value.. In 'Priority' strategy, if the highest priority member becomes unhealthy (SLA failure), the traffic automatically fails over to the next highest priority member.

Answer

Traffic is dropped.

Answer

The FortiGate enters an error state.

Answer

Traffic is load balanced across all remaining members.

Question 6

What is the default behavior when all SD-WAN members in a rule fail their SLA?

Accepted Answer

The traffic uses all members.. If all members fail the SLA, the default behavior is that the rule will use all members as if the SLA was met, unless configured otherwise.

Answer

The traffic is routed to the management interface.

Answer

The rule becomes inactive.

Answer

The traffic is dropped.

Question 7

When configuring an SD-WAN rule for a specific application, how does the FortiGate identify the traffic?

Accepted Answer

By using the Application Control database.. The FortiGate uses the Application Control engine or specific destination IP/port objects to classify traffic for SD-WAN rules.

Answer

By analyzing the packet payload size.

Answer

By looking at the source MAC address.

Answer

By forcing traffic through a specific VLAN.

Question 8

Which THREE of the following are parameters that can be monitored in a Performance SLA?

Accepted Answer

Packet Loss. Performance SLAs monitor latency, jitter, and packet loss.

Answer

CPU load

Answer

Disk usage

Question 9

You are deploying a new SD-WAN interface. What is the mandatory step before you can add an interface to an SD-WAN zone?

Accepted Answer

Remove all firewall policy, static route, and DHCP references from the interface.. Before an interface can be added to an SD-WAN zone, it must not have any existing references, such as being used in a firewall policy, static route, or DHCP server configuration.

Answer

Configure a performance SLA for that specific interface.

Answer

Assign a VLAN ID to the interface.

Answer

Enable SD-WAN on the global system settings.

Question 10

Which protocol is NOT a valid option for Performance SLA probes?

Accepted Answer

UDP Broadcast. FortiGate supports ping (ICMP), TCP echo, HTTP, and Two-Way Active Measurement Protocol (TWAMP).

Answer

TCP Echo

Answer

HTTP

Answer

ICMP