Question 551 of 1,000

Advanced Networking and SD-WAN →easyMultiple ChoiceObjective-mapped

Quick Answer

The answer is to set the MPLS link priority to 10 and the broadband link priority to 5, then configure an SD-WAN rule with the 'best quality' strategy. This works because the 'best quality' strategy selects the member with the highest priority when all links are healthy, so the higher-priority MPLS link (10) is always preferred over the broadband link (5). If the MPLS link fails its SLA health checks, the strategy automatically fails over to the broadband link, fulfilling the primary/backup failover requirement without manual intervention. On the Fortinet NSE 7 Advanced Security NSE7 exam, this scenario tests your understanding of SD-WAN rule strategies versus simple load-balancing methods—a common trap is choosing 'maximize bandwidth' or 'lowest cost', which ignore priority for failover behavior. Remember the memory tip: "Higher priority wins the best quality crown; when the crown falls, the backup takes the town."

NSE7 Advanced Networking and SD-WAN Practice Question

This NSE7 practice question tests your understanding of advanced networking and sd-wan. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.

A network administrator is configuring SD-WAN on a FortiGate. The organization has two internet links: MPLS (primary) and broadband (backup). The administrator wants all traffic to use the MPLS link unless it fails, in which case traffic should fail over to the broadband link. Which SD-WAN configuration best achieves this requirement?

Clue words in this question

Noticing these words before you look at the options changes how you read each choice.

Clue: "best"
Why it matters: Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.
Clue: "primary"
Why it matters: Asks for the main purpose or function, not a secondary benefit. Eliminate answers that describe side-effects or partial functions.

Question 1easymultiple choice

Read the full MPLS explanation →

A
Set the MPLS link priority to 10 and the broadband link priority to 5, then configure an SD-WAN rule with the 'best quality' strategy.
Higher priority for MPLS ensures it is preferred. The 'best quality' strategy selects the member with the highest priority when available, providing failover.
B
Enable 'set role' on the MPLS link as 'primary' and on the broadband link as 'standby' with the 'redundant' strategy.
Why wrong: FortiGate SD-WAN does not have a 'role' setting or 'redundant' strategy; these are not valid options.
C
Configure both links in the SD-WAN zone with equal priority and use the 'lowest cost' strategy.
Why wrong: Equal priority would not enforce active/passive behavior; traffic might be load-balanced. The 'lowest cost' strategy is not the primary method for failover.
D
Create two static routes: one with higher distance for MPLS and one with lower distance for broadband.
Why wrong: Static route distance is not used for SD-WAN member selection; SD-WAN rules use priorities and strategies.

Full breakdown with real-world context →

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Set the MPLS link priority to 10 and the broadband link priority to 5, then configure an SD-WAN rule with the 'best quality' strategy.

Option A is correct because setting the MPLS link priority to 10 (higher) and broadband to 5 (lower) ensures the SD-WAN rule with 'best quality' strategy selects the MPLS link as the preferred path. The 'best quality' strategy evaluates link quality metrics and, when priorities differ, prefers the higher-priority link. If the MPLS link fails, the strategy automatically fails over to the broadband link, meeting the requirement.

Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Set the MPLS link priority to 10 and the broadband link priority to 5, then configure an SD-WAN rule with the 'best quality' strategy.
Why this is correct
Higher priority for MPLS ensures it is preferred. The 'best quality' strategy selects the member with the highest priority when available, providing failover.
Clue confirmation
The clue words "best", "primary" in the question point toward this answer.
Related concept
Read the scenario before looking for a memorised answer.
✗
Enable 'set role' on the MPLS link as 'primary' and on the broadband link as 'standby' with the 'redundant' strategy.
Why it's wrong here
FortiGate SD-WAN does not have a 'role' setting or 'redundant' strategy; these are not valid options.
✗
Configure both links in the SD-WAN zone with equal priority and use the 'lowest cost' strategy.
Why it's wrong here
Equal priority would not enforce active/passive behavior; traffic might be load-balanced. The 'lowest cost' strategy is not the primary method for failover.
✗
Create two static routes: one with higher distance for MPLS and one with lower distance for broadband.
Why it's wrong here
Static route distance is not used for SD-WAN member selection; SD-WAN rules use priorities and strategies.

Common exam traps

Common exam trap: answer the scenario, not the keyword

The trap here is that candidates often confuse SD-WAN failover with traditional static route failover using administrative distance, or incorrectly assume that role-based 'primary/standby' settings exist in FortiGate SD-WAN, leading them to choose options B or D instead of understanding that SD-WAN uses priority and strategy-based path selection.

Detailed technical explanation

How to think about this question

In FortiGate SD-WAN, the 'best quality' strategy evaluates link quality metrics (jitter, latency, packet loss) and priority values; a higher priority number indicates a more preferred link. When the primary link fails, the SD-WAN rule dynamically selects the next best available link based on the strategy, without requiring route table changes. This differs from traditional routing where static routes with administrative distances control failover, as SD-WAN provides application-aware path selection and automatic failover at the policy level.

KKey Concepts to Remember

Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.

TExam Day Tips

Watch for words such as best, first, most likely and least administrative effort.
Review why wrong options are wrong, not only why the correct option is correct.

Key takeaway

Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Real-world example

How this comes up in practice

A small business has 20 workstations on the 192.168.1.0/24 network and one public IP from its ISP. The router uses PAT (NAT overload) so all 20 devices share one public address using different source ports. NAT questions test whether you understand the four address terms and which direction each translation applies.

What to study next

Got this wrong? Here's your next step.

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

Related NSE7 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

Advanced Networking and SD-WAN practice questions

Practise NSE7 questions linked to Advanced Networking and SD-WAN.

Advanced VPN and Zero Trust practice questions

Practise NSE7 questions linked to Advanced VPN and Zero Trust.

Enterprise Firewall and VDOMs practice questions

Practise NSE7 questions linked to Enterprise Firewall and VDOMs.

Advanced Threat Protection practice questions

Practise NSE7 questions linked to Advanced Threat Protection.

Troubleshooting and Diagnostics practice questions

Practise NSE7 questions linked to Troubleshooting and Diagnostics.

NSE7 fundamentals practice questions

Practise NSE7 questions linked to NSE7 fundamentals.

NSE7 scenario practice questions

Practise NSE7 questions linked to NSE7 scenario.

NSE7 troubleshooting practice questions

Practise NSE7 questions linked to NSE7 troubleshooting.

Practice this exam

Start a free NSE7 practice session

Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.

10 questions 20 questions 30 questions 50 questions Timed 30

NSE7 practice-test guide →Study guide →Browse all practice tests

FAQ

Questions learners often ask

What does this NSE7 question test?

Advanced Networking and SD-WAN — This question tests Advanced Networking and SD-WAN — Read the scenario before looking for a memorised answer..

What is the correct answer to this question?

The correct answer is: Set the MPLS link priority to 10 and the broadband link priority to 5, then configure an SD-WAN rule with the 'best quality' strategy. — Option A is correct because setting the MPLS link priority to 10 (higher) and broadband to 5 (lower) ensures the SD-WAN rule with 'best quality' strategy selects the MPLS link as the preferred path. The 'best quality' strategy evaluates link quality metrics and, when priorities differ, prefers the higher-priority link. If the MPLS link fails, the strategy automatically fails over to the broadband link, meeting the requirement.

What should I do if I get this NSE7 question wrong?

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

Are there clue words in this question I should notice?

Yes — watch for: "best", "primary". Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.

What is the key concept behind this question?

Read the scenario before looking for a memorised answer.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Keep practising

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.