CCNA Nse7 SD Wan Central Management Questions

Multi-Selectmedium

Which TWO methods can be used to update SD-WAN policies across all managed devices in FortiManager?

Select 2 answers

A.Using a CLI script to push updates

B.Modifying the SD-WAN template and installing the changes

C.Editing the individual FortiGate policy

D.Creating a new ADOM

E.Rebooting the FortiManager

AnswersA, B

Scripts are an alternative method for updates.

Why this answer

Updates are performed by modifying the template and then pushing the updated configuration to the devices.

Practice this question →

MCQmedium

When configuring SD-WAN in FortiManager, why would you use 'Shared Objects'?

A.To increase the number of VDOMs supported

B.To allow FortiGates to share logs

C.To enable reuse of configuration elements across different templates

D.To create a site-to-site VPN

AnswerC

Shared objects promote consistency and reduce maintenance effort.

Why this answer

Shared objects allow you to define parameters like health check servers once and reuse them across multiple templates, simplifying updates.

Practice this question →

MCQhard

What happens if you modify an SD-WAN template that is already applied to a FortiGate?

A.The changes take effect immediately without a push

B.The configuration status shows 'Modified' and requires an installation task

C.The FortiGate automatically pulls the new config

D.The FortiGate configuration is reverted

AnswerB

Installation is required to synchronize the device with the template.

Why this answer

The change creates a configuration difference, which must be pushed to the device to take effect.

Practice this question →

MCQmedium

In SD-WAN central management, what is the 'SD-WAN Zone' used for?

A.To define the physical port speed

B.To limit bandwidth for specific users

C.To group multiple SD-WAN members for logical policy routing

D.To isolate the SD-WAN traffic from the WAN

AnswerC

Zones simplify routing by aggregating interfaces.

Why this answer

SD-WAN zones allow you to group multiple physical interfaces into a logical container for easier policy management.

Practice this question →

MCQmedium

When viewing the SD-WAN Monitor in FortiManager, what information is provided for the 'Health Check' status?

A.The firmware version of the device

B.The number of active users

C.Latency, jitter, and packet loss metrics

D.The current IP address of the interface

AnswerC

These are the key performance indicators for SD-WAN health.

Why this answer

The monitor shows the latency, jitter, and packet loss for every configured health check probe on the monitored device.

Practice this question →

MCQmedium

How can you verify that an SD-WAN configuration change was successfully applied to a FortiGate via FortiManager?

A.By checking the FortiAnalyzer logs

B.By restarting the FortiGate

C.By checking the Device Manager installation status

D.By viewing the system dashboard of the FortiGate locally

AnswerC

This shows the success or failure of the push operation.

Why this answer

The 'Installation' task status in the Task Monitor will show 'Success', and the device configuration history will show the synchronized state.

Practice this question →

Multi-Selecthard

Which THREE pieces of information are displayed in the SD-WAN Monitor in FortiManager?

Select 3 answers

A.Status of SD-WAN members

B.Latency, jitter, and packet loss

C.Interface bandwidth usage

D.System temperature of the FortiGate

E.The current username of the logged-in admin

AnswersA, B, C

Visibility into member status is key.

Why this answer

The SD-WAN monitor provides visibility into the health of probes, the interface bandwidth, and the overall performance of the SD-WAN links.

Practice this question →

Multi-Selectmedium

Which TWO of the following are benefits of using SD-WAN templates in FortiManager?

Select 2 answers

A.Consistent SD-WAN policy application across devices

B.Automatic firmware upgrades

C.Automated log analysis

D.Direct access to the FortiGate CLI

E.Simplified configuration deployment for large branch deployments

AnswersA, E

Consistency is a core purpose of templates.

Why this answer

Templates provide standardized configurations and reduce the administrative burden by avoiding per-device manual settings.

Practice this question →

MCQeasy

Which interface can be used as an SD-WAN member in an SD-WAN template?

A.Physical ports, VLANs, and VPN tunnels

B.Only WAN physical ports

C.Only VLANs

D.Only loopback interfaces

AnswerA

SD-WAN supports various interface types.

Why this answer

Any physical or logical (VPN tunnel) interface can be added as an SD-WAN member.

Practice this question →

Multi-Selecthard

Which THREE interface types are supported as SD-WAN members?

Select 3 answers

A.VLAN interfaces

B.VPN tunnel interfaces

C.Loopback interfaces

D.Aggregate interfaces

E.Physical interfaces

AnswersA, B, E

VLANs are standard logical members.

Why this answer

SD-WAN members can be physical interfaces, VLANs, or VPN tunnel interfaces.

Practice this question →

MCQhard

If an SD-WAN template contains a reference to an interface that does not exist on a target FortiGate, what occurs during the installation process?

A.The FortiGate automatically creates a dummy interface

B.The installation fails with a configuration error

C.The installation proceeds and ignores the missing interface

D.The FortiGate enters an 'Emergency' state

AnswerB

Validation errors prevent configuration deployment.

Why this answer

The installation will fail during the pre-check or push validation phase because the dependency is missing.

Practice this question →

MCQmedium

When using SD-WAN templates, how are SD-WAN rules ordered?

A.Top to bottom

B.Based on the creation date

C.By the interface speed

D.Randomly

AnswerA

SD-WAN rules are evaluated in a top-down sequence.

Why this answer

SD-WAN rules are evaluated from top to bottom, similar to standard firewall policies.

Practice this question →

MCQmedium

Which object must be created before assigning a health check to an SD-WAN service rule in an SD-WAN template?

A.An SD-WAN Health Check

B.A routing protocol

C.A firewall address object

D.An SD-WAN Zone

AnswerA

Health checks are explicitly defined as objects in the template.

Why this answer

Health checks must be defined within the template configuration to be usable in SD-WAN rules.

Practice this question →

MCQmedium

When creating an SD-WAN template, what must be defined before you can add an SD-WAN interface to the template?

A.Individual SD-WAN member interfaces

B.The SD-WAN health check probes

C.Global firewall policies

D.The virtual domain (VDOM) settings

AnswerA

Members must be defined to form the SD-WAN construct.

Why this answer

You must define the member interfaces within the template before referencing them in SD-WAN zones or rules.

Practice this question →

MCQeasy

What is required before FortiManager can display SD-WAN monitoring data?

A.The FortiGate must have a cloud license

B.The FortiGate must be sending logs to FortiManager

C.The FortiGate must be running a specific firmware

D.The FortiGate must be in Transparent mode

AnswerB

Logs are the data source for the SD-WAN monitor.

Why this answer

FortiManager must be configured to receive logs from the FortiGate, and 'Log to FortiManager' must be enabled on the FortiGate.

Practice this question →

MCQhard

If you modify a shared SD-WAN health check object that is referenced by ten different templates, what happens to the FortiGates?

A.All FortiGates using those templates will be affected after an install

B.The FortiGates will automatically revert to the old settings

C.The health check will be disabled on all devices

D.Only the templates are updated, not the FortiGates

AnswerA

Shared objects propagate changes to all linked entities.

Why this answer

The change affects all templates referencing that object; once pushed, the changes update the health check settings on all associated FortiGates.

Practice this question →

MCQhard

During SD-WAN template deployment, what is the role of 'Dynamic Mapping'?

A.To map a single template object to different physical settings on different devices

B.To automate firmware updates

C.To monitor bandwidth usage

D.To dynamically change the SD-WAN rule based on time

E.To calculate the latency of paths

AnswerA

Dynamic mappings solve the problem of non-uniform interface names.

Why this answer

Dynamic mapping allows you to map a single template object to different physical values (like interface names) on different FortiGate devices.

Practice this question →

MCQmedium

When using SD-WAN templates, which option allows you to manage different ISPs on different branches within the same template?

A.Dynamic Mapping

B.Global Objects

C.Device Groups

D.SD-WAN Rules

AnswerA

Dynamic mapping handles device-specific interface differences.

Why this answer

Dynamic mapping allows you to associate the 'WAN' member in the template to 'port1' on one branch and 'wan1' on another.

Practice this question →

Multi-Selectmedium

Which TWO of these are valid SD-WAN health check protocols?

Select 2 answers

A.SSH

B.FTP

C.HTTP

D.Ping

E.SNMP

AnswersC, D

HTTP is a supported health check protocol.

Why this answer

FortiGate SD-WAN supports multiple probes, including HTTP, Ping, and DNS, to verify link health.

Practice this question →

MCQmedium

When configuring SD-WAN services in a template, what does the 'Performance SLA' setting determine?

A.The physical port priority

B.The maximum bandwidth allowed

C.The number of tunnels created

D.The criteria for path selection based on link quality

AnswerD

SLA criteria determine if a link is eligible for traffic.

Why this answer

The Performance SLA defines the criteria (latency, jitter, loss) that must be met for a path to be considered 'healthy' for traffic.

Practice this question →

Multi-Selectmedium

Which TWO criteria can be used in SD-WAN rules to select an outgoing interface?

Select 2 answers

A.The name of the administrator

B.System temperature

C.Device serial number

D.Source and destination address

E.Application or service type

AnswersD, E

Address objects are key criteria.

Why this answer

Rules use criteria like source/destination address, services, and application signatures to steer traffic.

Practice this question →

MCQeasy

How do you apply an SD-WAN template to multiple managed FortiGates simultaneously?

A.By manually editing each FortiGate config

B.By assigning the template in the Device Manager tab

C.Through individual CLI console sessions

D.By creating a global profile

AnswerB

Templates are assigned to devices via the Device Manager UI.

Why this answer

In the Device Manager tab, you can assign an SD-WAN template to multiple devices by selecting them and applying the template.

Practice this question →

MCQeasy

Which feature in FortiManager allows you to monitor SD-WAN performance across all managed FortiGates?

A.Device Manager

B.Log View

C.Dashboard > SD-WAN Monitor

D.Policy & Objects

AnswerC

This provides unified visibility into SD-WAN metrics.

Why this answer

SD-WAN Monitor within FortiManager provides visibility into performance metrics for all managed SD-WAN devices.

Practice this question →

MCQhard

You are troubleshooting a scenario where an SD-WAN template is not pushing to a FortiGate. Which log file on the FortiManager is most useful to identify the specific CLI command causing the failure?

A.fmg_event.log

B.fmg_debug.log

C.fmg_audit.log

D.fmg_system.log

AnswerB

This log contains detailed task execution and CLI command push history.

Why this answer

The fmg_debug.log or the task monitor logs show the specific CLI commands being pushed and the FortiGate response.

Practice this question →

MCQmedium

You are configuring SD-WAN templates in FortiManager. What is the primary purpose of using SD-WAN Central Management instead of configuring SD-WAN directly on individual FortiGates?

A.To perform local traffic analysis on the FortiGate only

B.To allow FortiGates to manage their own SD-WAN interfaces independently

C.To bypass the need for ADOMs

D.To enable SD-WAN template inheritance and synchronized policy updates across multiple managed devices

AnswerD

SD-WAN templates allow for standardized configurations across managed FortiGates.

Why this answer

Central management enables consistent SD-WAN policy deployment, simplified configuration management across large-scale deployments, and centralized monitoring.

Practice this question →

MCQmedium

What is the benefit of using 'SD-WAN Zones' in templates when managing 100+ branches?

A.They allow for multiple internet service providers

B.They automatically configure static routes

C.They increase the speed of the internet connection

D.They allow for easier mapping to physical ports across different hardware models

AnswerD

Zones decouple logical configuration from physical interface names.

Why this answer

Zones allow you to assign generic names to interfaces, so the template can refer to 'WAN_ZONE' rather than specific port names.

Practice this question →

Multi-Selecthard

Which THREE factors can affect the 'Performance SLA' logic in an SD-WAN template?

Select 3 answers

A.Packet loss threshold

B.The firmware version of the FortiGate

C.Jitter threshold

D.The number of active VPN tunnels

E.Latency threshold

AnswersA, C, E

Packet loss is a primary SLA parameter.

Why this answer

Performance SLA evaluates paths based on measured latency, jitter, and packet loss compared to defined thresholds.

Practice this question →

MCQmedium

You want to standardize the SD-WAN configuration for 50 remote branch offices. Which FortiManager feature should you use?

A.Policy Packages

B.Firmware Images

C.CLI Scripts

D.SD-WAN Templates

AnswerD

Templates provide consistent, manageable configurations.

Why this answer

SD-WAN templates are specifically designed for mass deployment of standardized configurations.

Practice this question →

MCQhard

You have a large SD-WAN deployment. Why would you use a 'Centralized Policy' in FortiManager instead of local policies?

A.To eliminate the need for logs

B.To enforce global security and traffic routing policies consistently across multiple sites

C.To reduce the CPU load on the FortiGate

D.To allow local admins to override global policies

AnswerB

Global policy packages ensure consistency.

Why this answer

Centralized policy packages allow you to enforce security and SD-WAN routing rules consistently across the entire organization from one location.

Practice this question →

Multi-Selecthard

Which THREE tasks are required to successfully deploy SD-WAN via FortiManager?

Select 3 answers

A.Installing the configuration to the devices

B.Creating an SD-WAN template

C.Performing a hard factory reset on the FortiGate

D.Deleting all existing firewall policies

E.Assigning the template to managed FortiGates

AnswersA, B, E

Installation executes the push.

Why this answer

Deployment requires defining the template, assigning it to devices, and installing the configuration.

Practice this question →

Multi-Selectmedium

Which TWO items must be configured within an SD-WAN template for SD-WAN traffic steering to work?

Select 2 answers

A.DHCP server settings

B.SD-WAN Members

C.SD-WAN Rules

D.VLAN tagging

E.Local users

AnswersB, C

Members are the egress interfaces.

Why this answer

You must define the members (interfaces) and the rules (policies) that dictate how traffic is steered.

Practice this question →

Multi-Selectmedium

Which TWO configuration changes require a push from FortiManager to the FortiGate?

Select 2 answers

A.Changes to the log settings on the FortiGate local GUI

B.Changes to an SD-WAN template

C.Updating a firewall policy package

D.Adding a new user to the FortiGate local database

E.Changing the FortiManager admin password

AnswersB, C

Templates are configuration data needing a push.

Why this answer

Any change made in the FortiManager policy or template objects requires a push to keep the device config synchronized.

Practice this question →