NSE7 Advanced Networking and SD-WAN Practice Question
A FortiGate is configured with an SD-WAN rule using 'spillover' algorithm. The primary member has a spillover threshold of 100 Mbps. Traffic of 80 Mbps is currently flowing through the primary member. A new session requiring 30 Mbps arrives. What will happen?
⚠ Common exam trap
It's easy for candidates to assume the algorithm checks if the *new session alone* exceeds the threshold, rather than evaluating the *cumulative load* after adding the new session, leading them to incorrectly select option A.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The new session is sent to the secondary member because the primary threshold would be exceeded.
The SD-WAN 'spillover' algorithm forwards traffic to the primary member until its load reaches the configured threshold (100 Mbps). With 80 Mbps already flowing, adding a new 30 Mbps session would push the total to 110 Mbps, exceeding the threshold. Therefore, the new session is sent to the secondary member to avoid oversubscription, as per the spillover logic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The new session is sent to the primary member because the current load is below the threshold.
Why it's wrong here
The algorithm considers the projected load, not just current load. Adding 30 Mbps would exceed the threshold.
- ✓
The new session is sent to the secondary member because the primary threshold would be exceeded.
Why this is correct
Spillover sends the session to the next available member when adding it would exceed the threshold.
- ✗
The new session is dropped because no member can handle it.
Why it's wrong here
The session would be routed to another member, not dropped.
- ✗
The primary member's threshold is dynamically increased.
Why it's wrong here
Thresholds are static; they are not changed dynamically.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.