Courseiva
Advanced Networking and SD-WANmediumMultiple ChoiceObjective-mapped

NSE7 Advanced Networking and SD-WAN Practice Question

An administrator configures SD-WAN with two members (port1 and port2). A performance SLA monitors latency to 8.8.8.8. The SD-WAN rule uses 'Best Quality' strategy based on latency. When the link on port1 becomes slow, the FortiGate continues using port1 even though port2 has lower latency. What is the most likely cause?

⚠ Common exam trap

Many exam-takers assume configuring a performance SLA automatically applies to all SD-WAN members, but FortiOS requires explicit association per member for the SLA to influence path selection.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The performance SLA is not associated with the SD-WAN members

The performance SLA must be explicitly associated with the SD-WAN members (port1 and port2) for the 'Best Quality' strategy to use latency measurements. Without this association, the FortiGate cannot compare the SLA results per interface and defaults to using the current active member, even if its latency is higher. The SLA monitors 8.8.8.8, but the SD-WAN rule has no link to those measurements, so port1 continues to be used.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The FortiGate is not receiving ICMP replies from 8.8.8.8

    Why it's wrong here

    If it were not receiving replies, the SLA would fail and the link would be considered dead, causing failover.

  • The SD-WAN rule is configured with 'Manual' strategy

    Why it's wrong here

    Manual strategy would not automatically switch; but the described strategy is Best Quality, so it should switch based on SLA.

  • The performance SLA is not associated with the SD-WAN members

    Why this is correct

    If the performance SLA is not applied to the SD-WAN member interface, the FortiGate does not know the latency status and cannot failover.

  • The load balancing algorithm is set to 'volume' instead of 'lowest-latency'

    Why it's wrong here

    The strategy is 'Best Quality' based on latency, not load balancing algorithm. The issue is SLA not being associated.

About these practice questions

Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.