NSE7 Advanced Networking and SD-WAN Practice Question
An administrator wants to ensure that all traffic from a specific LAN subnet (192.168.10.0/24) to the internet uses a particular WAN interface (wan1) in an SD-WAN setup, while other traffic uses wan2. What is the correct configuration to achieve this?
⚠ Common exam trap
Test-takers frequently confuse policy-based routing (PBR) with SD-WAN rules, assuming PBR can achieve the same outcome, but Fortinet's SD-WAN requires explicit SD-WAN rules to control member selection within the SD-WAN zone.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure an SD-WAN rule with source address matching 192.168.10.0/24 and set the preferred member to wan1
In Fortinet SD-WAN, traffic steering is achieved through SD-WAN rules, not policy routes. An SD-WAN rule with a source address matching 192.168.10.0/24 and a preferred member set to wan1 ensures that all traffic from that subnet is directed to wan1, while other traffic falls through to the default SD-WAN rule or other rules using wan2. This is the correct method because SD-WAN rules are evaluated before the routing table and provide granular control over member selection based on application, source, or destination.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a policy-based routing rule with source 192.168.10.0/24 and set outgoing interface to wan1
Why it's wrong here
Policy-based routing works with firewall policies, but SD-WAN uses SD-WAN rules.
- ✓
Configure an SD-WAN rule with source address matching 192.168.10.0/24 and set the preferred member to wan1
Why this is correct
SD-WAN rules allow source-based matching and preferred member selection.
- ✗
Set the default route for wan1 with a higher distance
Why it's wrong here
This would affect all traffic, not just the specific subnet.
- ✗
Use a route map with prefix list to match the subnet and set next-hop to wan1
Why it's wrong here
This is used for BGP, not SD-WAN forwarding.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.