NSE7 Advanced Networking and SD-WAN Practice Question
A FortiGate is configured with two SD-WAN members: port1 and port2. The administrator wants to ensure that voice traffic uses port1, but if port1's latency exceeds 150 ms, voice traffic should fail over to port2. Which configuration is required to achieve this?
⚠ Common exam trap
The trap here is thinking that a single-member rule can fail over; failover requires the rule to have multiple members and an SLA that monitors them.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create an SD-WAN rule with the 'Application' criteria for voice, set the outgoing interface to port1 and port2, and configure a performance SLA with latency threshold 150 ms on both members.
To achieve automatic failover based on latency, the SD-WAN rule must include both members as possible outgoing interfaces, and a performance SLA must be configured to monitor latency on both. If the preferred member exceeds the threshold, it is marked out of SLA, and the rule selects the next best member.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create an SD-WAN rule with the 'Application' criteria for voice, set the outgoing interface to port1, and enable 'SLA target' with a latency threshold of 150 ms on port1.
Why it's wrong here
This configuration does not automatically fail over to port2 if port1 exceeds the latency threshold. The rule would still try to use port1 even if it fails the SLA, unless a second member is specified. Failover requires multiple members in the rule.
- ✓
Create an SD-WAN rule with the 'Application' criteria for voice, set the outgoing interface to port1 and port2, and configure a performance SLA with latency threshold 150 ms on both members.
Why this is correct
This configuration allows the SD-WAN rule to consider both members. If port1 exceeds the latency threshold, it will be marked as out of SLA, and the rule will fail over to port2 if it meets the SLA. This achieves the desired behavior.
- ✗
Create two SD-WAN rules: one for port1 with a latency threshold of 150 ms, and one for port2 with a higher priority. Voice traffic will automatically use port1 and fail over to port2.
Why it's wrong here
SD-WAN rules are evaluated in order; if the first rule matches, it is used regardless of SLA status unless the rule includes multiple members. Two separate rules do not provide automatic failover based on SLA; the first matching rule would be used.
- ✗
Create an SD-WAN rule with the 'Application' criteria for voice, set the outgoing interface to port1, and configure a performance SLA with latency threshold 150 ms on port1 only.
Why it's wrong here
This configuration only monitors port1. If port1 fails the SLA, there is no alternative member to fail over to, so traffic would be dropped or use the default route. Both members must be included in the rule for failover.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 718 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Fortinet exam blueprint
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.