NSE7 Advanced Networking and SD-WAN Practice Question
A FortiGate with SD-WAN enabled uses two members: MPLS (10 ms latency) and Internet (40 ms latency). The SD-WAN rule uses 'Best Quality' strategy with latency as the metric. Traffic to a critical application (10.1.1.0/24) is currently using the MPLS link. The MPLS link's latency increases to 60 ms due to a routing issue. How will FortiGate handle new sessions to 10.1.1.0/24?
⚠ Common exam trap
Watch out — candidates often assume SD-WAN automatically re-routes all traffic (including existing sessions) when link quality degrades, but in reality, only new sessions are affected unless a session-based failover mechanism like session TTL or manual intervention is configured.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
New sessions will use the Internet link; existing sessions continue on MPLS.
The 'Best Quality' strategy with latency metric selects the link with the lowest latency for new sessions. When MPLS latency rises to 60 ms, it exceeds the Internet link's 40 ms, so new sessions will be steered to the Internet. However, SD-WAN does not preemptively rehash existing sessions; they remain on the original link (MPLS) until they expire or are torn down.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
New sessions will use the Internet link; existing sessions continue on MPLS.
Why this is correct
Best Quality uses SLA metrics to steer new sessions to the best member, but does not affect existing sessions.
- ✗
FortiGate will wait for the MPLS link to recover before sending new traffic.
Why it's wrong here
FortiGate will not wait; it will use the Internet link as it becomes the best.
- ✗
All sessions immediately switch to the Internet link.
Why it's wrong here
Only new sessions are affected; existing sessions are not disrupted.
- ✗
Existing sessions continue on MPLS; new sessions will use MPLS until the next SLA probe.
Why it's wrong here
The SLA probe would detect the high latency and steer new sessions away.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.