NSE7_SDW Central Management Practice Test 1 — 15 Questions

Question 1

Which menu path in FortiManager is used to define SD-WAN templates?

Accepted Answer

Device Manager > SD-WAN Template. SD-WAN templates are managed under the 'Policy & Objects' tab within the device configuration context.

Answer

System Settings > SD-WAN

Answer

Policy & Objects > Firewall Policy

Answer

Log View > SD-WAN

Question 2

Which feature in FortiManager allows you to monitor SD-WAN performance across all managed FortiGates?

Accepted Answer

Dashboard > SD-WAN Monitor. SD-WAN Monitor within FortiManager provides visibility into performance metrics for all managed SD-WAN devices.

Answer

Device Manager

Answer

Log View

Answer

Policy & Objects

Question 3

What is the benefit of using 'SD-WAN Zones' in templates when managing 100+ branches?

Accepted Answer

They allow for easier mapping to physical ports across different hardware models. Zones allow you to assign generic names to interfaces, so the template can refer to 'WAN_ZONE' rather than specific port names.

Answer

They allow for multiple internet service providers

Answer

They automatically configure static routes

Answer

They increase the speed of the internet connection

Question 4

Which THREE interface types are supported as SD-WAN members?

Accepted Answer

VLAN interfaces. SD-WAN members can be physical interfaces, VLANs, or VPN tunnel interfaces.

Answer

Loopback interfaces

Answer

Aggregate interfaces

Question 5

When using SD-WAN templates, how are SD-WAN rules ordered?

Accepted Answer

Top to bottom. SD-WAN rules are evaluated from top to bottom, similar to standard firewall policies.

Answer

Based on the creation date

Answer

By the interface speed

Answer

Randomly

Question 6

In SD-WAN central management, what is the 'SD-WAN Zone' used for?

Accepted Answer

To group multiple SD-WAN members for logical policy routing. SD-WAN zones allow you to group multiple physical interfaces into a logical container for easier policy management.

Answer

To define the physical port speed

Answer

To limit bandwidth for specific users

Answer

To isolate the SD-WAN traffic from the WAN

Question 7

You are troubleshooting a scenario where an SD-WAN template is not pushing to a FortiGate. Which log file on the FortiManager is most useful to identify the specific CLI command causing the failure?

Accepted Answer

fmg_debug.log. The fmg_debug.log or the task monitor logs show the specific CLI commands being pushed and the FortiGate response.

Answer

fmg_event.log

Answer

fmg_audit.log

Answer

fmg_system.log

Question 8

When creating an SD-WAN template, what must be defined before you can add an SD-WAN interface to the template?

Accepted Answer

Individual SD-WAN member interfaces. You must define the member interfaces within the template before referencing them in SD-WAN zones or rules.

Answer

The SD-WAN health check probes

Answer

Global firewall policies

Answer

The virtual domain (VDOM) settings

Question 9

Which object must be created before assigning a health check to an SD-WAN service rule in an SD-WAN template?

Accepted Answer

An SD-WAN Health Check. Health checks must be defined within the template configuration to be usable in SD-WAN rules.

Answer

A routing protocol

Answer

A firewall address object

Answer

An SD-WAN Zone

Question 10

You are configuring SD-WAN templates in FortiManager. What is the primary purpose of using SD-WAN Central Management instead of configuring SD-WAN directly on individual FortiGates?

Accepted Answer

To enable SD-WAN template inheritance and synchronized policy updates across multiple managed devices. Central management enables consistent SD-WAN policy deployment, simplified configuration management across large-scale deployments, and centralized monitoring.

Answer

To perform local traffic analysis on the FortiGate only

Answer

To allow FortiGates to manage their own SD-WAN interfaces independently

Answer

To bypass the need for ADOMs

Question 11

How do you apply an SD-WAN template to multiple managed FortiGates simultaneously?

Accepted Answer

By assigning the template in the Device Manager tab. In the Device Manager tab, you can assign an SD-WAN template to multiple devices by selecting them and applying the template.

Answer

By manually editing each FortiGate config

Answer

Through individual CLI console sessions

Answer

By creating a global profile

Question 12

What happens if you modify an SD-WAN template that is already applied to a FortiGate?

Accepted Answer

The configuration status shows 'Modified' and requires an installation task. The change creates a configuration difference, which must be pushed to the device to take effect.

Answer

The changes take effect immediately without a push

Answer

The FortiGate automatically pulls the new config

Answer

The FortiGate configuration is reverted

Question 13

You want to standardize the SD-WAN configuration for 50 remote branch offices. Which FortiManager feature should you use?

Accepted Answer

SD-WAN Templates. SD-WAN templates are specifically designed for mass deployment of standardized configurations.

Answer

Policy Packages

Answer

Firmware Images

Answer

CLI Scripts

Question 14

During SD-WAN template deployment, what is the role of 'Dynamic Mapping'?

Accepted Answer

To map a single template object to different physical settings on different devices. Dynamic mapping allows you to map a single template object to different physical values (like interface names) on different FortiGate devices.

Answer

To automate firmware updates

Answer

To monitor bandwidth usage

Answer

To dynamically change the SD-WAN rule based on time

Answer

To calculate the latency of paths

Question 15

If an SD-WAN template contains a reference to an interface that does not exist on a target FortiGate, what occurs during the installation process?

Accepted Answer

The installation fails with a configuration error. The installation will fail during the pre-check or push validation phase because the dependency is missing.

Answer

The FortiGate automatically creates a dummy interface

Answer

The installation proceeds and ignores the missing interface

Answer

The FortiGate enters an 'Emergency' state