NSE7_SDW Practice Question: A network administrator at a large enterprise uses FortiManager to manage 120 FortiGates
A network administrator at a large enterprise uses FortiManager to manage 120 FortiGates. The security team wants to enforce a consistent SD-WAN configuration across all branches, but the branches have different WAN link counts and interface names. The administrator wants to avoid manually editing each device's configuration. Which FortiManager feature should the administrator use to create a reusable SD-WAN configuration that can adapt to each device's interface names?
⚠ Common exam trap
The trap here is assuming that any template type can dynamically adapt interface names, when only SD-WAN templates with metadata variables provide that device-specific substitution.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SD-WAN template with metadata variables
SD-WAN templates in FortiManager are designed to centralize and standardize SD-WAN configurations across many devices. By incorporating metadata variables, the template can reference device-specific values such as interface names, which are resolved during installation. This allows a single template to be applied to branches with different physical interface naming, ensuring consistency without manual per-device edits. Other options lack the SD-WAN specific constructs and dynamic mapping capability.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Provisioning template with static interface mapping
Why it's wrong here
Provisioning templates are used to configure system-level settings such as DNS, NTP, and administrative access, not SD-WAN specific configurations. They do not provide the dynamic interface substitution needed for SD-WAN members. While they can be assigned to multiple devices, they lack the SD-WAN specific objects like health checks and rules, and cannot adapt to varying interface names, so they fail to meet the requirement.
- ✗
CLI template script with hardcoded interface names
Why it's wrong here
CLI template scripts execute raw CLI commands on managed devices, but they require hardcoded values and do not support dynamic substitution based on device metadata. In an environment with different interface names, the script would fail or misconfigure devices. Additionally, CLI scripts are not designed for reusable SD-WAN configurations and lack validation, making them error-prone and unsuitable for this scenario.
- ✗
Policy package with per-device installation targets
Why it's wrong here
Policy packages define firewall policies and objects, but they do not include SD-WAN template constructs like health checks, SLA targets, or SD-WAN rules. While policy packages can be assigned to multiple devices, they cannot dynamically adapt interface names or provide the SD-WAN specific configuration reuse. They are complementary to SD-WAN templates but do not fulfill the requirement on their own.
- ✓
SD-WAN template with metadata variables
Why this is correct
SD-WAN templates in FortiManager support metadata variables that can be assigned per device, allowing interface names to be dynamically substituted during provisioning. This enables a single template to adapt to different interface naming conventions across branches, eliminating manual edits and ensuring consistency. The template defines the SD-WAN structure, and variables map device-specific values, which is exactly what the administrator needs for heterogeneous environments.
Visual reference
About these practice questions
One of 216 original NSE7_SDW practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
You might also like
Similar NSE7_SDW questions
- An administrator is troubleshooting an SD-WAN template deployment in FortiManager. The template fails to install on a ma…
- During SD-WAN template deployment, what is the role of 'Dynamic Mapping'?
- Which TWO items must be configured within an SD-WAN template for SD-WAN traffic steering to work?
- Which TWO configuration changes require a push from FortiManager to the FortiGate?
- Which THREE pieces of information are displayed in the SD-WAN Monitor in FortiManager?
Written and reviewed by Johnson Ajibi, MSc IT Security
Security Systems Architect · founder of Courseiva
Last reviewed September 2026 · checked against the official Fortinet exam blueprint
This NSE7_SDW practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7_SDW exam.