NSE7 Troubleshooting and Diagnostics Practice Question
An administrator notices that an application-based SD-WAN rule is not steering traffic as expected. The SLA targets are configured correctly. Which TWO debug commands should the administrator use to diagnose the issue? (Choose two.)
⚠ Common exam trap
Test-takers frequently confuse 'diagnose sys sdwan rule list' with a valid command, when in fact it does not exist in FortiOS, and they overlook the need to inspect actual session flows with 'diagnose sys session list' to confirm traffic steering behavior.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
diagnose sys sdwan info
'diagnose sys sdwan info' displays the current SD-WAN configuration and status, including SLA targets, interface metrics, and rule assignments, which helps verify if the SD-WAN rule is correctly applied. Option E is correct because filtering session entries by destination port 443 (HTTPS) and listing them shows active traffic flows, allowing the administrator to confirm whether the application traffic is being steered according to the SD-WAN rule or taking an unexpected path.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
diagnose debug application sslvpn -1
Why it's wrong here
This is for SSL VPN debugging, not SD-WAN.
- ✗
get system performance status
Why it's wrong here
Shows overall CPU/memory, not SD-WAN specific.
- ✓
diagnose sys sdwan info
Why this is correct
Displays SD-WAN configuration, member status, and SLA compliance.
- ✗
diagnose sys sdwan rule list
Why it's wrong here
This command does not exist; SD-WAN rules are shown via 'diagnose sys sdwan info'.
- ✓
diagnose sys session filter dport 443 ; diagnose sys session list
Why this is correct
Shows session details including which SD-WAN member is used.
Visual reference
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.