FORTINET-NSE7-SPECIALTY Practice Question: Nse7 SD Wan Security Profiles Routing And Ipsec
An administrator troubleshoots a scenario where traffic matching an application-based SD-WAN rule is bypassing the preferred high-speed MPLS tunnel and taking the backup broadband tunnel instead. Which THREE factors should the administrator check to resolve this routing discrepancy? (Choose three)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Inspect the member priorities and weights configured within the specific SD-WAN rule
When an SD-WAN rule bypasses preferred paths, potential causes include SLA health check failure (the preferred link fails the SLA threshold), incorrect rule evaluation order (an earlier rule matches first), or interface priority/weight settings within the rule. Checking these three areas is standard practice.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Verify the FortiGate factory default administrator password is changed
Why it's wrong here
Default passwords have no impact on SD-WAN rule path selection.
- ✗
Check the physical layer OSI Model cable category connected to the FortiGate port
Why it's wrong here
Cable category does not dictate SD-WAN rule matching or SLA evaluation.
- ✓
Inspect the member priorities and weights configured within the specific SD-WAN rule
Why this is correct
Correct. Member priorities and weights determine selection order among qualifying links in the SD-WAN rule.
- ✓
Verify whether the preferred MPLS member is failing the configured performance SLA thresholds, causing the SD-WAN engine to disqualify it
Why this is correct
Correct. If a member fails its SLA, the SD-WAN rule automatically steers traffic to a healthy backup member.
- ✓
Check the sequence order of the SD-WAN rules; an earlier rule might be matching the traffic first
Why this is correct
Correct. SD-WAN rules are evaluated top-down, and a broader rule higher in the list can intercept traffic.
Visual reference
About these practice questions
Courseiva writes every FORTINET-NSE7-SPECIALTY question from scratch — 191 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Fortinet exam blueprint
This FORTINET-NSE7-SPECIALTY practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FORTINET-NSE7-SPECIALTY exam.