NSE7 Advanced Networking and SD-WAN Practice Question
Which THREE statements are true about FortiGate SD-WAN health-check configuration?
⚠ Common exam trap
Many candidates assume health-check can use any interface as a source (like loopback) or that it only works on physical interfaces, but FortiGate restricts probe source to the member interface and supports VLANs and aggregates.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Health-check can be configured with multiple thresholds for jitter, latency, and packet loss.
FortiGate SD-WAN health-check allows configuring multiple thresholds for jitter, latency, and packet loss. These thresholds are used to determine the quality of a link; if any threshold is exceeded, the link is considered failed. This enables granular control over link health assessment beyond simple reachability.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Health-check probes can be sent from any interface, including loopback.
Why it's wrong here
Health-check probes are sent from the SD-WAN member interfaces themselves, not from loopback.
- ✗
Health-check can only be configured on physical interfaces, not VLANs or subinterfaces.
Why it's wrong here
Health-check can be configured on any SD-WAN member, including VLANs and subinterfaces.
- ✓
Health-check can be configured with multiple thresholds for jitter, latency, and packet loss.
Why this is correct
Performance SLA thresholds can be defined for jitter, latency, and packet loss.
- ✓
Health-check can update the routing table by setting 'update-static-route' to enable fallback.
Why this is correct
When enabled, health-check failure can remove the static route, and recovery can re-add it.
- ✓
Health-check can be configured to use HTTP or DNS protocols to verify link health.
Why this is correct
HTTP and DNS are valid protocol options for health-check probes.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.