NSE7 Advanced Networking and SD-WAN Practice Question
A network administrator is configuring SD-WAN on a FortiGate with two WAN links (port1 and port2). They want traffic to destination 10.0.0.0/8 to use port1 as long as its latency is below 50ms and jitter below 10ms; otherwise, fail over to port2. Which SD-WAN configuration components are required?
⚠ Common exam trap
Many exam-takers think each interface needs its own performance SLA (Option B) or that multiple rules are required for failover (Option C), but FortiGate SD-WAN consolidates monitoring and policy into one SLA and one rule, with the SLA applied to the primary member and failover handled by the rule's member list.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SD-WAN members, one performance SLA, one SD-WAN rule with the performance SLA as a strategy
SD-WAN failover based on latency and jitter thresholds requires a single performance SLA to measure both metrics on the active link (port1), and one SD-WAN rule that uses that SLA as the strategy to determine best path. The rule defines the destination (10.0.0.0/8) and the SLA's thresholds trigger failover to port2 when exceeded. Only one SLA is needed since the condition is applied to the primary link, not both.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
SD-WAN members, one performance SLA, one SD-WAN member with a static route
Why it's wrong here
Static routes are not part of SD-WAN configuration; SD-WAN uses rules and SLAs.
- ✗
SD-WAN members, two performance SLAs (one per interface), one SD-WAN rule
Why it's wrong here
A single performance SLA can monitor multiple interfaces; two are not required.
- ✗
SD-WAN members, one performance SLA, two SD-WAN rules (one for each interface)
Why it's wrong here
Only one SD-WAN rule is needed to define the behavior for the destination.
- ✓
SD-WAN members, one performance SLA, one SD-WAN rule with the performance SLA as a strategy
Why this is correct
The performance SLA defines latency/jitter thresholds. The SD-WAN rule references the SLA and sets the strategy to 'best quality' or 'manual' to enforce failover based on SLA compliance.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.