NSE7 Advanced Networking and SD-WAN Practice Question
An administrator needs to configure a FortiGate to use two WAN links for internet traffic with failover and load balancing. Which TWO steps are required?
⚠ Common exam trap
Watch out — candidates often assume adding interfaces as SD-WAN members alone enables load balancing and failover, but without SD-WAN rules, the FortiGate defaults to a single-route behavior, negating the SD-WAN benefits.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Define SD-WAN rules to match internet-bound traffic.
For internet traffic failover and load balancing over two WAN links, the FortiGate must first add both WAN interfaces as SD-WAN members (option E) to form the SD-WAN zone. Then, SD-WAN rules (option D) are required to match internet-bound traffic and define how it is distributed among the members (e.g., by volume, session, or spillover) and which failover strategy to apply. Without these rules, the SD-WAN zone cannot enforce load balancing or failover policies for the traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a performance SLA for each SD-WAN member.
Why it's wrong here
Optional for health checks; not strictly required for basic failover.
- ✗
Set the SD-WAN zone to 'spillover' mode.
Why it's wrong here
Mode is selected per rule, not zone.
- ✗
Enable NAT on the SD-WAN zone.
Why it's wrong here
NAT is configured on firewall policies, not the zone.
- ✓
Define SD-WAN rules to match internet-bound traffic.
Why this is correct
Rules determine how traffic is load-balanced.
- ✓
Add both WAN interfaces as SD-WAN members.
Why this is correct
Required for SD-WAN operation.
Go deeper
Related to this question
About these practice questions
One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.