NSE7_SDW Central Management Practice Test 2 — 15 Questions

Question 1

When configuring SD-WAN in FortiManager, why would you use 'Shared Objects'?

Accepted Answer

To enable reuse of configuration elements across different templates. Shared objects allow you to define parameters like health check servers once and reuse them across multiple templates, simplifying updates.

Answer

To increase the number of VDOMs supported

Answer

To allow FortiGates to share logs

Answer

To create a site-to-site VPN

Question 2

When viewing the SD-WAN Monitor in FortiManager, what information is provided for the 'Health Check' status?

Accepted Answer

Latency, jitter, and packet loss metrics. The monitor shows the latency, jitter, and packet loss for every configured health check probe on the monitored device.

Answer

The firmware version of the device

Answer

The number of active users

Answer

The current IP address of the interface

Question 3

What is required before FortiManager can display SD-WAN monitoring data?

Accepted Answer

The FortiGate must be sending logs to FortiManager. FortiManager must be configured to receive logs from the FortiGate, and 'Log to FortiManager' must be enabled on the FortiGate.

Answer

The FortiGate must have a cloud license

Answer

The FortiGate must be running a specific firmware

Answer

The FortiGate must be in Transparent mode

Question 4

When configuring SD-WAN services in a template, what does the 'Performance SLA' setting determine?

Accepted Answer

The criteria for path selection based on link quality. The Performance SLA defines the criteria (latency, jitter, loss) that must be met for a path to be considered 'healthy' for traffic.

Answer

The physical port priority

Answer

The maximum bandwidth allowed

Answer

The number of tunnels created

Question 5

Which interface can be used as an SD-WAN member in an SD-WAN template?

Accepted Answer

Physical ports, VLANs, and VPN tunnels. Any physical or logical (VPN tunnel) interface can be added as an SD-WAN member.

Answer

Only WAN physical ports

Answer

Only VLANs

Answer

Only loopback interfaces

Question 6

You have a large SD-WAN deployment. Why would you use a 'Centralized Policy' in FortiManager instead of local policies?

Accepted Answer

To enforce global security and traffic routing policies consistently across multiple sites. Centralized policy packages allow you to enforce security and SD-WAN routing rules consistently across the entire organization from one location.

Answer

To eliminate the need for logs

Answer

To reduce the CPU load on the FortiGate

Answer

To allow local admins to override global policies

Question 7

If you modify a shared SD-WAN health check object that is referenced by ten different templates, what happens to the FortiGates?

Accepted Answer

All FortiGates using those templates will be affected after an install. The change affects all templates referencing that object; once pushed, the changes update the health check settings on all associated FortiGates.

Answer

The FortiGates will automatically revert to the old settings

Answer

The health check will be disabled on all devices

Answer

Only the templates are updated, not the FortiGates

Question 8

When using SD-WAN templates, which option allows you to manage different ISPs on different branches within the same template?

Accepted Answer

Dynamic Mapping. Dynamic mapping allows you to associate the 'WAN' member in the template to 'port1' on one branch and 'wan1' on another.

Answer

Global Objects

Answer

Device Groups

Answer

SD-WAN Rules

Question 9

Which TWO of the following are benefits of using SD-WAN templates in FortiManager?

Accepted Answer

Consistent SD-WAN policy application across devices. Templates provide standardized configurations and reduce the administrative burden by avoiding per-device manual settings.

Answer

Automatic firmware upgrades

Answer

Automated log analysis

Answer

Direct access to the FortiGate CLI

Question 10

How can you verify that an SD-WAN configuration change was successfully applied to a FortiGate via FortiManager?

Accepted Answer

By checking the Device Manager installation status. The 'Installation' task status in the Task Monitor will show 'Success', and the device configuration history will show the synchronized state.

Answer

By checking the FortiAnalyzer logs

Answer

By restarting the FortiGate

Answer

By viewing the system dashboard of the FortiGate locally

Question 11

Which TWO of these are valid SD-WAN health check protocols?

Accepted Answer

HTTP. FortiGate SD-WAN supports multiple probes, including HTTP, Ping, and DNS, to verify link health.

Answer

SSH

Answer

FTP

Answer

SNMP

Question 12

Which THREE tasks are required to successfully deploy SD-WAN via FortiManager?

Accepted Answer

Installing the configuration to the devices. Deployment requires defining the template, assigning it to devices, and installing the configuration.

Answer

Performing a hard factory reset on the FortiGate

Answer

Deleting all existing firewall policies

Question 13

Which TWO items must be configured within an SD-WAN template for SD-WAN traffic steering to work?

Accepted Answer

SD-WAN Members. You must define the members (interfaces) and the rules (policies) that dictate how traffic is steered.

Answer

DHCP server settings

Answer

VLAN tagging

Answer

Local users

Question 14

Which THREE pieces of information are displayed in the SD-WAN Monitor in FortiManager?

Accepted Answer

Status of SD-WAN members. The SD-WAN monitor provides visibility into the health of probes, the interface bandwidth, and the overall performance of the SD-WAN links.

Answer

System temperature of the FortiGate

Answer

The current username of the logged-in admin

Question 15

Which THREE factors can affect the 'Performance SLA' logic in an SD-WAN template?

Accepted Answer

Packet loss threshold. Performance SLA evaluates paths based on measured latency, jitter, and packet loss compared to defined thresholds.

Answer

The firmware version of the FortiGate

Answer

The number of active VPN tunnels