NSE7_SDW-7.2 Practice Online

Question 1

Which SD-WAN setting enables FortiGate to delay the recovery of ADVPN shortcuts?

A : hold-down-time

B : link-down-failover

C : auto-discovery-shortcuts

D : idle-timeout

Answer: A

Question 2

Which two protocols in the IPsec suite are most used for authentication and encryption? (Choosetwo.)

A : Encapsulating Security Payload (ESP)

B : Secure Shell (SSH)

C : Internet Key Exchange (IKE)

D : Security Association (SA)

Answer: A,C

Question 3

Refer to the exhibit.

Which two SD-WAN template member settings support the use of FortiManager meta fields? (Choose two.)

A : Cost

B : Interface member

C : Priority

D : Gateway IP

Answer: B,D

Question 4

Refer to the exhibit.

Based on the exhibit, which action does FortiGate take?

A : FortiGate bounces port5 after it detects all SD-WAN members as dead.

B : FortiGate fails over to the secondary device after it detects all SD-WAN members as dead.

C : FortiGate brings up port5 after it detects all SD-WAN members as alive.

D : FortiGate brings down port5 after it detects all SD-WAN members as dead.

Answer: D

Question 5

Which statement is correct about SD-WAN and ADVPN?

A : Routes for ADVPN shortcuts must be manually configured.

B :

SD-WAN can steer traffic to ADVPN shortcuts, established over IPsec overlays, configured as SD-WAN members.

C : SD-WAN does not monitor the health and performance of ADVPN shortcuts.

D : You must use IKEv2 on IPsec tunnels.

Answer: B

Name:	Fortinet NSE 7 - SD-WAN 7.2
Exam Code:	NSE7_SDW-7.2
Certification:	NSE 7 Network Security Architect
Vendor:	Fortinet
Total Questions:	81
Last Updated:	May 06, 2024