NSE7_SDW · domain
Central Management
Central Management on the NSE7 SD-WAN exam covers building and pushing SD-WAN configuration from FortiManager to managed FortiGates. Expect questions on SD-WAN templates, template assignment, meta fields and tags, performance SLA health checks, SD-WAN rules, and how template changes propagate to devices.
Focused practice
Practice Central Management questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Central Management
Be able to build an SD-WAN template in FortiManager, add health checks and SD-WAN rules, scope it with meta fields or tags, and install it to FortiGates. The key is understanding how template changes propagate and how scoping controls which devices receive which rules.
Creating and assigning SD-WAN templates in FortiManager to managed FortiGates
Defining SD-WAN rules with source, destination, and link selection criteria
Using meta fields and tags to scope template and rule deployment to device groups
Watch out for
Common Central Management exam traps
- ▸Assuming template edits auto-push to devices; changes must be installed or the policy package re-installed to take effect.
- ▸Confusing FortiManager meta fields with FortiGate object tags, or misapplying tag scope so rules hit wrong devices.
- ▸Forgetting that SD-WAN template changes can overwrite local FortiGate SD-WAN settings, losing manual edits.
Question index
All Central Management questions (78)
Click any question to see the full explanation, or start a practice session above.
What happens if you modify an SD-WAN template that is already applied to a FortiGate?
Hard2When configuring SD-WAN in FortiManager, why would you use 'Shared Objects'?
Medium3How do you apply an SD-WAN template to multiple managed FortiGates simultaneously?
Easy4An administrator has configured an SD-WAN template in FortiManager and applied it to a FortiGate. Later, the administrator modifies the template by adding a new SD-WAN zone and a new performance SLA. What happens when the administrator installs the modified template to the FortiGate?
Hard5A network administrator manages 80 FortiGate devices in FortiManager. The company wants to ensure that all devices use the same SD-WAN health check settings for a critical business application, but each device has a different WAN IP address. Which FortiManager feature should the administrator use to meet this requirement?
Medium6An administrator is configuring an SD-WAN template in FortiManager for a hub-and-spoke topology. The administrator wants to ensure that the SD-WAN rules can dynamically select the best path based on performance. Which two components must be configured within the SD-WAN template to achieve this? (Choose two.)
Medium7An administrator is configuring an SD-WAN template in FortiManager for a new branch deployment. The template will include multiple SD-WAN members and a performance SLA that monitors the health of these members. Which two statements about the relationship between SD-WAN templates and health check objects are true? (Choose two.)
Medium8A network administrator is using FortiManager to manage SD-WAN templates for multiple FortiGates. They need to ensure that a specific health check, which monitors a critical cloud application, is used by all SD-WAN rules across all templates. What is the most efficient way to achieve this in FortiManager?
Medium9A network engineer is configuring an SD-WAN template in FortiManager for a group of branch FortiGates. The engineer needs to define health checks that monitor the performance of WAN links. Which two health check protocols are supported in FortiManager SD-WAN templates? (Choose two.)
Medium10An administrator is creating an SD-WAN template in FortiManager. The template will be used to provision multiple FortiGates. The administrator wants to define a health check that uses ICMP probes to monitor the primary WAN link. Which FortiManager object must be configured within the SD-WAN template to achieve this?
Easy11When configuring SD-WAN services in a template, what does the 'Performance SLA' setting determine?
Medium12An administrator has configured an SD-WAN template in FortiManager and applied it to a FortiGate. Later, the administrator needs to add a new VLAN interface as an SD-WAN member. Where should this change be made to ensure it is reflected in the FortiManager-managed configuration?
Hard13A network administrator is configuring an SD-WAN template in FortiManager. The template includes multiple SD-WAN rules that reference different Performance SLAs. The administrator wants to ensure that if a link fails an SLA, traffic is automatically routed to another link that meets the SLA. Which SD-WAN rule strategy should be used to achieve this?
Hard14An administrator is configuring an SD-WAN template in FortiManager. The template includes a performance SLA that monitors two health checks: one for latency and one for packet loss. Which FortiManager object must be referenced in the SD-WAN template to define these health checks?
Medium15An administrator has just created an SD-WAN template in FortiManager and assigned it to a policy package for 30 branch FortiGates. Before installing, the administrator wants to verify how the SD-WAN members, zones, and performance SLA settings will look on a specific FortiGate without affecting the production configuration. Which FortiManager feature should the administrator use?
Easy16You are troubleshooting a scenario where an SD-WAN template is not pushing to a FortiGate. Which log file on the FortiManager is most useful to identify the specific CLI command causing the failure?
Hard17A network administrator is managing an SD-WAN deployment with multiple FortiGates using FortiManager. The administrator needs to ensure that all SD-WAN health checks are consistent across all devices and that any changes to the health check parameters are automatically propagated. Which FortiManager object should the administrator use to achieve this?
Hard18Which TWO criteria can be used in SD-WAN rules to select an outgoing interface?
Medium19A network administrator at a large enterprise uses FortiManager to manage 120 FortiGates. The security team wants to enforce a consistent SD-WAN configuration across all branches, but the branches have different WAN link counts and interface names. The administrator wants to avoid manually editing each device's configuration. Which FortiManager feature should the administrator use to create a reusable SD-WAN configuration that can adapt to each device's interface names?
Medium20An administrator is troubleshooting an SD-WAN template deployment in FortiManager. The template fails to install on a managed FortiGate. Which two actions should the administrator take to identify the cause? (Choose two.)
Hard21During SD-WAN template deployment, what is the role of 'Dynamic Mapping'?
Hard22Which TWO items must be configured within an SD-WAN template for SD-WAN traffic steering to work?
Medium23Which TWO configuration changes require a push from FortiManager to the FortiGate?
Medium24Which THREE pieces of information are displayed in the SD-WAN Monitor in FortiManager?
Hard25An administrator is reviewing the SD-WAN configuration in FortiManager after applying a template to several FortiGates. They notice that one FortiGate has a different SD-WAN rule order than the others. What is the most likely reason for this discrepancy?
Medium26An administrator has an SD-WAN template applied to 30 FortiGates via FortiManager. The template includes a performance SLA named 'Critical_SLA' that monitors two WAN links. The administrator needs to change the SLA's probe interval from 500ms to 1000ms without affecting other settings. After modifying the template, what must the administrator do to propagate the change to all managed FortiGates?
Hard27An administrator is configuring an SD-WAN template in FortiManager. The template will be used to deploy SD-WAN to multiple branch FortiGates. Which two statements about SD-WAN templates in FortiManager are true? (Choose two.)
Hard28An administrator has an SD-WAN template in FortiManager that is assigned to a managed FortiGate. The FortiGate is currently offline. The administrator modifies the template and installs the configuration. What happens to the FortiGate when it comes back online?
Medium29An administrator is using FortiManager to manage an SD-WAN deployment. The administrator needs to add a new SD-WAN member to an existing template that is already assigned to 20 FortiGates. After modifying the template, what must the administrator do to apply the change to all managed devices?
Medium30An administrator has created an SD-WAN template in FortiManager and applied it to a group of FortiGates. Later, they need to modify the template to add a new health check. What is the most efficient way to update all managed devices with this change?
Medium31Which TWO of the following are benefits of using SD-WAN templates in FortiManager?
Medium32A network administrator manages 30 FortiGate devices in FortiManager. The administrator wants to ensure that all devices use the same SD-WAN health check settings for a specific SLA target. Which FortiManager object should the administrator configure to achieve this?
Medium33Which THREE factors can affect the 'Performance SLA' logic in an SD-WAN template?
Hard34A network administrator is using FortiManager to manage a large SD-WAN deployment. They need to create a new SD-WAN template that will be applied to multiple FortiGates. The administrator wants to ensure that the template can be easily modified in the future without having to manually update each device. Which FortiManager object should they use to define the SD-WAN template?
Medium35When using SD-WAN templates, how are SD-WAN rules ordered?
Medium36An administrator is using FortiManager to deploy an SD-WAN configuration to a new FortiGate. The administrator wants to ensure that the SD-WAN member interfaces are correctly associated with the physical interfaces on the device. Which FortiManager feature allows the administrator to define the mapping between logical SD-WAN interfaces and physical interfaces?
Easy37A company uses FortiManager to manage SD-WAN configurations for 50 branch offices. The administrator needs to update the SD-WAN rules across all branches to include a new application category for SaaS traffic. The update must be applied consistently and with minimal administrative effort. Which two actions should the administrator take to achieve this? (Choose two.)
Medium38A company uses FortiManager to manage 100 FortiGates. They have an SD-WAN template applied to all devices. The administrator modifies a health check within the template to change the probe interval from 500ms to 1000ms. After saving the template, they want to push the change to all managed FortiGates. What must the administrator do to ensure the updated health check is applied to all devices?
Hard39You have a large SD-WAN deployment. Why would you use a 'Centralized Policy' in FortiManager instead of local policies?
Hard40If you modify a shared SD-WAN health check object that is referenced by ten different templates, what happens to the FortiGates?
Hard41A company has an SD-WAN template in FortiManager that is assigned to 50 FortiGates. The template includes a health check object named 'HC1' that monitors a server at 10.0.0.1. The administrator modifies 'HC1' to monitor 10.0.0.2 instead. After the change, the administrator notices that some FortiGates still show the old server IP in their running configuration. What is the most likely reason for this discrepancy?
Hard42An administrator is configuring an SD-WAN template in FortiManager. They want to ensure that the template can be applied to FortiGates with different interface names. Which feature in FortiManager allows mapping template interface references to actual device interfaces?
Easy43An administrator is using FortiManager to manage SD-WAN configurations for multiple FortiGates. They need to update the SD-WAN template to change the health check target for all devices. After modifying the template, they want to ensure the changes are pushed to all managed FortiGates efficiently. Which action should they take in FortiManager?
Medium44You want to standardize the SD-WAN configuration for 50 remote branch offices. Which FortiManager feature should you use?
Medium45What is required before FortiManager can display SD-WAN monitoring data?
Easy46A network administrator is using FortiManager to manage SD-WAN configurations for multiple FortiGates. The administrator wants to define a health check that will be used across several SD-WAN templates and needs to ensure that any changes to this health check are automatically propagated to all templates that reference it. Which FortiManager object should the administrator create?
Medium47An administrator needs to deploy an SD-WAN template to a FortiGate that has two WAN interfaces: wan1 and wan2. The template includes an SD-WAN rule that load-balances traffic across both interfaces. During installation, the administrator receives an error that the interface mapping is incomplete. What is the most likely cause?
Medium48An administrator is using FortiManager to manage an SD-WAN deployment with 80 FortiGates. The SD-WAN template includes a health check that pings the destination '8.8.8.8' every 500ms. The administrator notices that some branches have high latency to that destination, causing unnecessary failovers. The administrator wants to change the health check destination to a regional server with lower latency for each branch. However, the branches are in different geographic regions. What is the most efficient way to customize the health check destination per region without creating multiple templates?
Hard49An administrator has created an SD-WAN template in FortiManager and applied it to a FortiGate. The administrator then modifies the template to add a new SD-WAN rule that directs traffic from a specific subnet to a new overlay interface. After installing the policy package, the administrator notices that the rule is not taking effect on the FortiGate. What is the most likely reason?
Hard50A network engineer is creating an SD-WAN template in FortiManager. They want to define a health check that monitors the quality of an internet link by sending HTTP requests to a specific URL. Which configuration element in the SD-WAN template should they use to accomplish this?
Easy51An administrator is configuring an SD-WAN template in FortiManager. The template includes a performance SLA that monitors two health checks: one for latency and one for jitter. The administrator wants the SD-WAN rule to select the member with the lowest latency. Which FortiManager configuration element must be used to achieve this?
Hard52An administrator is using FortiManager 7.2 to manage SD-WAN templates across 150 FortiGates. They need to ensure that when a template is updated, the changes are propagated efficiently and that the FortiGates maintain high availability. The administrator wants to use the 'Install Wizard' to push the updated template. Which two statements are true about installing an SD-WAN template with the Install Wizard in this scenario? (Choose two.)
Hard53A network administrator is using FortiManager to manage SD-WAN configurations for multiple FortiGates. The administrator wants to ensure that all devices use the same health check server IP address for their SD-WAN performance SLAs. Where in FortiManager should the administrator define this shared health check server?
Easy54A network engineer is using FortiManager to manage SD-WAN templates for multiple FortiGates. They need to ensure that a specific SD-WAN rule is only applied to branch offices that have a specific tag. Which FortiManager feature should they use?
Hard55How can you verify that an SD-WAN configuration change was successfully applied to a FortiGate via FortiManager?
Medium56A network engineer is configuring an SD-WAN template in FortiManager for a new branch office. The branch has two internet links: one via DHCP and one via static IP. The engineer wants to ensure that the SD-WAN rule prefers the static link for business-critical traffic but can fail over to the DHCP link if the static link's performance degrades. Which SD-WAN template component should the engineer configure to define the performance thresholds that trigger failover?
Easy57Which object must be created before assigning a health check to an SD-WAN service rule in an SD-WAN template?
Medium58An administrator has an SD-WAN template in FortiManager that is already assigned to a managed FortiGate. The administrator edits the template to change the SD-WAN zone membership of an interface from 'virtual-wan-link' to a custom zone named 'overlay'. After saving the template, what must the administrator do to push this change to the FortiGate?
Hard59A network administrator is using FortiManager to manage an SD-WAN deployment. They want to create a new SD-WAN template that includes a health check for the 'MPLS' interface. Where in the FortiManager GUI should the administrator navigate to create this template?
Easy60Which TWO methods can be used to update SD-WAN policies across all managed devices in FortiManager?
Medium61A company uses FortiManager to manage 200 FortiGates with SD-WAN enabled. The administrator needs to update the SD-WAN health check settings for all branches to use a new server IP. The health check is referenced by a single SD-WAN template that is assigned to all branches. After modifying the health check object in FortiManager, what must the administrator do to apply the changes to all FortiGates?
Hard62An administrator is creating an SD-WAN template in FortiManager and needs to define the member interfaces. Which FortiManager object is used to group these interfaces for the SD-WAN configuration?
Easy63In SD-WAN central management, what is the 'SD-WAN Zone' used for?
Medium64When creating an SD-WAN template, what must be defined before you can add an SD-WAN interface to the template?
Medium65Which interface can be used as an SD-WAN member in an SD-WAN template?
Easy66You are configuring SD-WAN templates in FortiManager. What is the primary purpose of using SD-WAN Central Management instead of configuring SD-WAN directly on individual FortiGates?
Medium67An administrator is creating an SD-WAN template in FortiManager to be applied to multiple FortiGate devices. The administrator wants to ensure that the template can be reused across devices with different WAN interface names. Which configuration element in the SD-WAN template allows the use of variables for interface names?
Easy68A network administrator is troubleshooting an SD-WAN deployment managed by FortiManager. The administrator notices that after installing an SD-WAN template, some FortiGates are not using the expected health check server. The administrator verifies that the template is correctly configured with the health check server IP. What is the most likely cause for the discrepancy?
Hard69An administrator is configuring an SD-WAN template in FortiManager. The template includes multiple health checks that monitor the performance of different WAN links. The administrator wants to ensure that if a health check fails, the SD-WAN rule automatically redirects traffic to another member. Which component of the SD-WAN template is responsible for defining the action taken when a health check fails?
Easy70A network engineer is configuring an SD-WAN template in FortiManager. They want to define a performance SLA that monitors the quality of two WAN links using HTTP probes to a specific server. Which FortiManager object should they configure to define the HTTP probe parameters?
Easy71When viewing the SD-WAN Monitor in FortiManager, what information is provided for the 'Health Check' status?
Medium72A network engineer is using FortiManager to manage a FortiGate that already has a local SD-WAN configuration. The engineer wants to transition to centralized management by assigning an SD-WAN template to the device. After the template is assigned and installed, what is the effect on the existing local SD-WAN settings?
Medium73If an SD-WAN template contains a reference to an interface that does not exist on a target FortiGate, what occurs during the installation process?
Hard74Which THREE tasks are required to successfully deploy SD-WAN via FortiManager?
Hard75A network administrator is using FortiManager to manage a large SD-WAN deployment. The administrator needs to create a new SD-WAN template that will be used by several FortiGates. The template must include a health check that uses HTTP to monitor a specific server. Which FortiManager object type should the administrator configure first to define the HTTP health check before adding it to the SD-WAN template?
Medium76A network engineer is creating a new SD-WAN template in FortiManager. The template will be used to configure SD-WAN on several FortiGate devices. The engineer wants to define a health check that monitors the latency to a specific server using ICMP. Which configuration object should the engineer create first?
Easy77A network administrator is troubleshooting an SD-WAN deployment managed by FortiManager. They notice that a specific SD-WAN rule is not being enforced on a FortiGate, even though the template was installed successfully. The rule uses a performance SLA to select the best path. What is the most likely cause?
Hard78A network administrator is managing a FortiManager that has provisioned an SD-WAN template to a group of managed FortiGates. The administrator needs to verify that each FortiGate is actually running the intended SD-WAN configuration and that no device is out of sync. Which FortiManager workflow should the administrator use to compare the intended SD-WAN template configuration against the running configuration on each managed device?
MediumOther domains
All NSE7_SDW exam domains
Frequently asked questions
- What does the Central Management domain cover on the NSE7_SDW exam?
- Be able to build an SD-WAN template in FortiManager, add health checks and SD-WAN rules, scope it with meta fields or tags, and install it to FortiGates. The key is understanding how template changes propagate and how scoping controls which devices receive which rules.
- How many questions are in this domain?
- This page lists all 78 Central Management questions in the NSE7_SDW question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Central Management questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.