Fortinet NSE7_SDW-7.2 Übungsprüfungen
Zuletzt aktualisiert am 26.04.2025- Prüfungscode: NSE7_SDW-7.2
- Prüfungsname: Fortinet NSE 7 - SD-WAN 7.2
- Zertifizierungsanbieter: Fortinet
- Zuletzt aktualisiert am: 26.04.2025
Which SD-WAN setting enables FortiGate to delay the recovery of ADVPN shortcuts?
- A . hold-down-time
- B . link-down-failover
- C . auto-discovery-shortcuts
- D . idle-timeout
The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator must perform some post-run tasks.
What are three mandatory post-run tasks that must be performed? (Choose three.)
- A . Create policy packages for branch devices.
- B . Assign an sdwan_id metadata variable to each device (branch and hub}.
- C . Configure routing through overlay tunnels created by the SD-WAN overlay template.
- D . Assign a branch_id metadata variable to each branch device.
- E . Configure SD-WAN rules.
Refer to the exhibit.
Which statement about the role of the ADVPN device in handling traffic is true?
- A . This is a spoke that has received a query from a remote hub and has forwarded the response to its hub.
- B . Two hubs, 10.0.1.101 and 10.0.2.101, are receiving and forwarding queries between each other.
- C . This is a hub that has received a query from a spoke and has forwarded it to another spoke.
- D . Two spokes, 192.2.0.1 and 10.0.2.101, forward their queries to their hubs.
What three characteristics apply to provisioning templates available on FortiManager? (Choose three.)
- A . You can apply a system template and a CLI template to the same FortiGate device.
- B . A CLI template can be of type CLI script or Perl script.
- C . A template group can include a system template and an SD-WAN template.
- D . A template group can contain CLI templates of both types.
- E . Templates are applied in order, from top to bottom.
Refer to the exhibits.
Exhibit A
Exhibit B
Exhibit A shows the SD-WAN performance SLA configuration, the SD-WAN rule configuration, and the application IDs of Facebook and YouTube. Exhibit B shows the firewall policy configuration and the underlay zone status.
Based on the exhibits, which two statements are correct about the health and performance of port1 and port2? (Choose two.)
- A . The performance is an average of the metrics measured for Facebook and YouTube traffic passing through the member.
- B . FortiGate is unable to measure jitter and packet loss on Facebook and YouTube traffic.
- C . FortiGate identifies the member as dead when there is no Facebook and YouTube traffic passing through the member.
- D . Non-TCP Facebook and YouTube traffic are not used for performance measurement.
Refer to the exhibit.
An administrator used the SD-WAN overlay template to prepare an IPsec configuration for a hub-and-spoke SD-WAN topology. The exhibit shows the installation preview for one FortiGate device.
In the exhibit, which statement best describes the configuration applied to the FortiGate device?
- A . It is a hub device. It can send ADVPN shortcut offers.
- B . It is a spoke device that establishes dynamic IPsec tunnels to the hub. The subnet range is 10.10.128.0/23.
- C . It is a spoke device that establishes dynamic IPsec tunnels to the hub. It can send ADVPN shortcut requests.
- D . It is a hub device and will automatically discover the spoke devices that are in the SD-WAN topology.
Which two protocols in the IPsec suite are most used for authentication and encryption? (Choose two.)
- A . Encapsulating Security Payload (ESP)
- B . Secure Shell (SSH)
- C . Internet Key Exchange (IKE)
- D . Security Association (SA)
What are two benefits of choosing packet duplication over FEC for data loss correction on noisy links? (Choose two.)
- A . Packet duplication can leverage multiple IPsec overlays for sending additional data.
- B . Packet duplication does not require a route to the destination.
- C . Packet duplication supports hardware offloading.
- D . Packet duplication uses smaller parity packets which results in less bandwidth consumption.