NSE7 Troubleshooting and Diagnostics Practice Question
An administrator is troubleshooting an SD-WAN scenario where traffic from a branch office to a critical SaaS application is experiencing high latency. The SD-WAN rule uses the best quality SLA strategy. The administrator runs 'diagnose sys sdwan neighbor' and sees that both WAN links have SLA compliance above 90%. However, traffic still uses the slower link. The administrator then runs 'diagnose sys sdwan health-check list' and notices that the health-check server IP is different from the SaaS application's server IP. What is the MOST likely reason the traffic is not using the best-performing link?
⚠ Common exam trap
Many candidates assume high SLA compliance on both links means the best link will always be selected, but they overlook that the health-check target must match the application destination for SLA measurements to be relevant.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The health-check server's IP does not match the application's destination IP, so SLA measurements are not representative
The SD-WAN rule uses the best quality SLA strategy, which selects the link with the best SLA metrics (latency, jitter, packet loss) for the traffic. However, if the health-check server IP does not match the SaaS application's destination IP, the SLA measurements are not representative of the actual path to the application. The SD-WAN device measures performance to the health-check server, not the application server, so the link that appears best for the health-check may be worse for the actual application traffic, causing the slower link to be selected.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The health-check server's IP does not match the application's destination IP, so SLA measurements are not representative
Why this is correct
SLA probes measure latency to the health-check server, not the SaaS endpoint. When those IPs differ, the best quality strategy selects a link based on unrepresentative measurements, so the genuinely faster path to the application may be ignored.
- ✗
The SD-WAN rule is configured with 'set load-balance-mode' instead of 'best-quality'
Why it's wrong here
Load-balance mode distributes sessions across all SLA-compliant links, yet the stem states the rule uses the best quality SLA strategy, so that setting is not in effect. It is tempting because load balancing is a real SD-WAN strategy, correct when even traffic distribution across healthy links is wanted.
- ✗
The health-check server is not reachable from the faster link
Why it's wrong here
The health-check server being unreachable would mark that link SLA-failed, yet the stem shows both links above 90% compliance, so reachability is not the fault. Health checks legitimately measure link quality to a probe target; they would be the correct mechanism if the probe itself defined the monitored path.
- ✗
The SD-WAN rule has a manual routing override configured
Why it's wrong here
A manual routing override pins traffic to a specified member regardless of SLA scores, but the stem's health-check mismatch already explains the link selection. Overrides exist for deliberate path pinning during migrations or maintenance, where an administrator must force traffic down one link despite performance metrics.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 718 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.