NSE7_SDW-7.2 Exam Training Practice Tests (Fortinet NSE 7

Question 1

Exhibit B -

Exhibit A shows the system interface with the static routes and exhibit B shows the firewall policies on the managed FortiGate.
Based on the FortiGate configuration shown in the exhibits, what issue might you encounter when creating an SD-WAN zone for port1 and port2?

A. port2 is referenced in a static route. B. port1 is referenced in a firewall policy. C. port1 is assigned a manual IP address. D. port1 and port2 are not administratively down.

Correct Answer: B

Question 2

Refer to the exhibits.

Exhibit A shows the packet duplication rule configuration, the SD-WAN zone status output, and the sniffer output on FortiGate acting as the sender. Exhibit B shows the sniffer output on a FortiGate acting as the receiver.
The administrator configured packet duplication on both FortiGate devices. The sniffer output on the sender FortiGate shows that FortiGate forwards an ICMP echo request packet over three overlays, but it only receives one reply packet through T_INET_1_0.
Based on the output shown in the exhibits, which two reasons can cause the observed behavior? (Choose two.)

A. The ICMP echo request packets received over T_INET_0_0 and T_MPLS_0 were offloaded to NPU. B. On the receiver FortiGate,packet-de-duplicationis enabled. C. The ICMP echo request packets sent over T_INET_0_0 and T_MPLS_0 were dropped along the way. D. On the sender FortiGate,duplication-max-numis set to3.

Correct Answer: B,D

Question 3

Refer to the exhibit.

Which statement explains the output shown in the exhibit?

A. FortiGate used192.2.0.1as the gateway for the original direction of the traffic. B. FortiGate will not re-evaluate the session following a firewall policy change. C. FortiGate must re-evaluate the session due to routing change. D. FortiGate performed standard FIB routing on the session.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit.

Based on the exhibit, which two actions does FortiGate perform on traffic passing through port2? (Choose two.)

A. FortiGate does not change the routing information on existing sessions that use a valid gateway, after a route change. B. FortiGate always blocks all traffic, after a route change. C. FortiGate performs routing lookups for new sessions only, after a route change. D. FortiGate flushes all routing information from the session table, after a route change.

Correct Answer: A,C

Question 5

Which two statements describe how IPsec phase 1 main mode is different from aggressive mode when performing IKE negotiation? (Choose two )

A. A peer ID is included in the first packet from the initiator, along with suggested security policies. B. The use of Diffie Hellman keys is limited by the responder and needs initiator acceptance. C. A total of six packets are exchanged between an initiator and a responder instead of three packets. D. XAuth is enabled as an additional level of authentication, which requires a username and password.

Correct Answer: C,D

Question 6

Which type statements about the SD-WAN members are true? (Choose two.)

A. Interfaces of type virtual wire pair can be used as SD-WAN members. B. An SD-WAN member can belong to two or more SD-WAN zones. C. You can manually define the SD-WAN members sequence number. D. Interfaces of type VLAN can be used as SD-WAN members.

Correct Answer: C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit.

Based on the exhibit, which statement about FortiGate re-evaluating traffic is true?

A. FortiGate has terminated the session after a change on policy ID 1. B. The type of traffic defined and allowed on firewall policy ID 1 is UDP. C. Firewall policy ID 1 has source NAT disabled. D. Changes have been made on firewall policy ID 1 on FortiGate.

Correct Answer: D

Question 8

Which statement about using BGP routes in SD-WAN is true?

A. You must use BGP to route traffic for both overlay and underlay links. B. You must use external BGP. C. You must configure AS path prepending. D. Learned routes can be used as dynamic destinations in SD-WAN rules.

Correct Answer: D

Fortinet NSE 7 - SD-WAN 7.2 - NSE7_SDW-7.2 Exam Practice Test